CVE-2021-44702: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC ActiveX Control was found to contain an Information Disclosure vulnerability (CVE-2021-44702). The vulnerability affects multiple versions including 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue was disclosed on December 7, 2021, and Adobe released security updates to address it in March 2022 (Adobe Bulletin, NVD).

The vulnerability is classified as an Information Disclosure issue (CWE-200). When exploited, it allows an unauthenticated attacker to obtain NTLMv2 credentials from the target system. The exploitation requires user interaction, specifically requiring the victim to visit an attacker-controlled web page (MITRE CVE).

The successful exploitation of this vulnerability could lead to the disclosure of NTLMv2 credentials, potentially allowing attackers to gain unauthorized access to user accounts or systems (NVD).

Adobe has addressed this vulnerability through security updates released in their March 2022 security bulletin. Users are advised to update to the latest version of Adobe Acrobat Reader DC to mitigate this vulnerability (Adobe Bulletin).