CVE-2021-35982: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2021-35982 is an Uncontrolled Search Path Element vulnerability affecting Adobe Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The vulnerability was discovered and assigned on June 30, 2021, with updates to acknowledgment details occurring in September 2021 (CVE MITRE, Adobe Security).

The vulnerability is classified as an Uncontrolled Search Path Element vulnerability that could allow DLL hijacking. The CVSS score for this vulnerability is 7.0, indicating a high severity level with the following vector: AV:L/AC:M/Au:S/C:C/I:C/A:C (Rapid7).

If successfully exploited, this vulnerability could lead to arbitrary code execution in the context of the current user. The impact is particularly significant as it affects multiple versions of Adobe Acrobat Reader DC across different release streams (CVE MITRE).

The vulnerability requires local access and user interaction for successful exploitation. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in the context of the current user via DLL hijacking (CVE MITRE).

Adobe has released security updates to address this vulnerability along with other critical, important, and moderate vulnerabilities. Users are advised to update to the latest version of Adobe Acrobat and Reader for both Windows and macOS platforms (Adobe Security).