How severe is CVE-2021-21046?

This vulnerability has a severity rating of LOW with a CVSS score of 3.3 out of 10.

What type of vulnerability is CVE-2021-21046?

This is classified as CWE-787, which is a common weakness in software security.

CVE-2021-21046 - LOW Severity | CVSS 3.3

Vulnerability Description

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Related Vulnerabilities

CVE-2020-18900

LOW

CVSS:3.3(Low)

A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on Gi...

CWE-7872020

CVE-2020-3989

LOW

CVSS:3.3(Low)

VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious ac...

CWE-7872020

CVE-2020-8938

LOW

CVSS:3.3(Low)

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which al...

CWE-7872020

CVE-2021-42069

LOW

CVSS:3.3(Low)

When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily una...

CWE-7872021

CVE-2022-20526

LOW

CVSS:3.3(Low)

In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...

CWE-7872022

CVE-2022-31699

LOW

CVSS:3.3(Low)

VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a partial information disclosure.

CWE-7872022