Adobe Acrobat Reader 2017 vulnerabilities

4 CVEs affecting Adobe Acrobat Reader 2017, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39863, published 2021-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-4917, published 2018-05-19. Critical severity, CVSS 9.8. EPSS: 17.3% chance of exploitation in the next 30 days. Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could…
CVE-2021-39863, published 2021-09-29. High severity, CVSS 7.8. EPSS: 13.2% chance of exploitation in the next 30 days. Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted…
CVE-2021-39861, published 2021-09-29. Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days. Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to…
CVE-2021-39858, published 2021-09-29. Low severity, CVSS 3.3. EPSS: 2.5% chance of exploitation in the next 30 days. Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to…