Vulnerability Spotlight: Code execution vulnerability in Adobe Acrobat Reader
Summary: Cisco Talos discovered an arbitrary code execution vulnerability in Adobe Acrobat Reader, tracked as TALOS-2021-1233 (CVE-2021-28562), which exploits JavaScript queries in a way that could let an attacker execute code on the targeted machine. Exploitation requires tricking a user into opening a specially crafted malicious PDF, and Talos confirmed version 2020.013.20074 could be exploited while working with Adobe on an update.
Bottom line: The entry point is a PDF opened by a user, and Talos confirmed the listed Acrobat Reader version could be exploited, so the exposure sits on the endpoint where documents are routinely opened rather than behind a perimeter control.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-28562
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026