4.3
CVSSv2

CVE-2021-39856

Published: 29/09/2021 Updated: 05/02/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and previous versions), 2020.004.30006 (and previous versions) and 2017.011.30199 (and previous versions) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe acrobat

adobe acrobat reader

adobe acrobat dc

adobe acrobat reader dc