CVE-2021-28552: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2021-28552 is a Use After Free vulnerability affecting Adobe Acrobat Reader DC versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier), and 2017.011.30196 (and earlier). The vulnerability was discovered and reported to Adobe in April 2021, with public disclosure occurring on June 10, 2021 (ZDI Advisory).

The vulnerability exists within the handling of XFA templates in Adobe Acrobat Reader DC. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 HIGH (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is classified as CWE-416: Use After Free (NVD).

An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. The successful exploitation could lead to complete compromise of the affected system, allowing the attacker to execute arbitrary code with the same privileges as the compromised application (NVD).

Adobe has released security updates to address this vulnerability. Users should update to the latest version of Adobe Acrobat Reader DC as detailed in Adobe's security bulletin (Adobe Advisory).