Vulnerability Spotlight: Two vulnerabilities in Adobe Acrobat DC could lead to arbitrary code execution
Summary: Cisco Talos discovered two vulnerabilities in Adobe Acrobat Reader DC that are triggered when a user opens a specially crafted PDF containing malicious JavaScript. TALOS-2021-1387 (CVE-2021-44710) is a use-after-free flaw that can give attackers control over reused memory, and TALOS-2021-1410 (CVE-2021-44711) is an integer overflow condition; both could lead to arbitrary code execution.
What you should know: The affected version is Adobe Acrobat Reader 2021.007.20099, and exploitation requires only that a user open a malicious PDF, so the exposure sits with every recipient of an untrusted document rather than with a perimeter control.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-44710CVE-2021-44711
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026