CVE-2021-44707: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier), and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability identified as CVE-2021-44707. The vulnerability was reported on December 15, 2021, and publicly disclosed on March 25, 2022 (ZDI Advisory, NVD).

The vulnerability exists within the parsing of embedded fonts in Adobe Acrobat Reader DC. The specific flaw stems from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process, potentially leading to complete system compromise. The impact is significant as it could result in unauthorized access, data theft, or system manipulation (ZDI Advisory).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat Reader DC through the official Adobe security bulletin (Adobe Advisory).