CVE-2021-28557: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC was found to be affected by an Out-of-bounds Read vulnerability (CVE-2021-28557). The vulnerability impacts multiple versions including 2021.001.20150 and earlier, 2020.001.30020 and earlier, and 2017.011.30194 and earlier. This security flaw was discovered and reported in March 2021, with Adobe releasing details in their security advisory (Adobe Advisory).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) issue. According to the CVSS 3.1 scoring system, it received a Base Score of 4.3 (Medium), with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction (NVD Database).

When successfully exploited, this vulnerability could allow an unauthenticated attacker to leak sensitive system information in the context of the current user. The impact is limited to information disclosure, with no direct impact on system integrity or availability (NVD Database).

Adobe addressed this vulnerability through security updates for affected versions of Acrobat Reader DC. Users are advised to update to the latest version of the software to mitigate this security risk (Adobe Advisory).