CVE-2021-21037: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC (versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier) was affected by a Path Traversal vulnerability. This security flaw was discovered during the Tianfu Cup 2020 International Cybersecurity Contest and was assigned CVE-2021-21037. The vulnerability was publicly disclosed on February 11, 2021 (NVD, CVE).

The vulnerability is classified as a Path Traversal vulnerability (CWE-22) that could lead to arbitrary code execution. It received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v2.0 Base Score was rated at 6.8 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) (NVD).

If successfully exploited, this vulnerability could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. The impact could affect the confidentiality, integrity, and availability of the system (Qualys).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. The attack complexity is considered low, but requires local access (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat and Reader as detailed in the security bulletin APSB21-09 (Adobe Advisory).