Vulnerabilities > Adobe > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-10-15 CVE-2021-40721 Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect version 11.2.3 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability.
network
low complexity
adobe CWE-79
6.1
2021-09-29 CVE-2021-39845 Unspecified vulnerability in Adobe products
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user.
local
low complexity
adobe
6.1
2021-09-29 CVE-2021-39846 Out-of-bounds Write vulnerability in Adobe products
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user.
local
low complexity
adobe CWE-787
6.1
2021-09-29 CVE-2021-39853 Unspecified vulnerability in Adobe products
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability.
local
low complexity
adobe
5.5
2021-09-29 CVE-2021-39855 Unspecified vulnerability in Adobe products
Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability.
network
low complexity
adobe
6.5
2021-09-29 CVE-2021-39856 Unspecified vulnerability in Adobe products
Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability.
network
low complexity
adobe
6.5
2021-09-29 CVE-2021-39860 Unspecified vulnerability in Adobe products
Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability.
local
low complexity
adobe
5.5
2021-09-29 CVE-2021-39861 Unspecified vulnerability in Adobe products
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user.
local
low complexity
adobe
5.5
2021-09-27 CVE-2021-39828 Unspecified vulnerability in Adobe Digital Editions
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer.
local
low complexity
adobe
6.5
2021-09-27 CVE-2021-40711 Unspecified vulnerability in Adobe Experience Manager
Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments.
network
low complexity
adobe
5.4