Three (CVE-2021-21044, CVE-2021-21038, CVE-2021-21086) of the vulnerabilities patched on Tuesday open systems up to out-of-bounds write attacks.Īdobe Illustrator received the next highest number of patches on Tuesday, with five critical code execution vulnerabilities fixed. Seven out of those bugs included arbitrary code execution bugs. In all, Adobe Acrobat received 10 critical and four important vulnerability patches. May Adobe Update Fixes Multiple Critical BugsĪlso part of Tuesday’s roundup of 43 fixes are several other bugs rated critical. “Users can update their product installations manually by choosing Help > Check for Updates,” Adobe wrote in its May security bulletin, posted Tuesday. Typically, those details become available after users have had an opportunity to apply the fix. Windows & macOS Acrobat 2017 & Acrobat Reader 2017 (2017.011.30194 and earlier versions)Īdobe did not release technical specifics regarding the zero-day vulnerability.Windows & macOS Acrobat 2020 & Acrobat Reader 2020 (2020.001.30020 and earlier versions).macOS Acrobat DC & Reader DC (versions 2021.001.20149 and earlier).Windows Acrobat DC & Reader DC (versions 2021.001.20150 and earlier).However, the bug affects eight versions of the software, including those running on Windows and macOS systems.

Windows users of Adobe Reader may be the only ones currently targeted. Join Threatpost for “ Fortifying Your Business Against Ransomware, DDoS & Cryptojacking Attacks” a LIVE roundtable event on Wednesday, May 12 at 2:00 PM EDT for this FREE webinar sponsored by Zoho ManageEngine.Īccording to Adobe, the zero-day vulnerability, which is tracked as CVE-2021-28550, “has been exploited in the wild in limited attacks targeting Adobe Reader users on Windows.”

Adobe pdf reader