CVE-2021-45062: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier were affected by a use-after-free vulnerability. The vulnerability was discovered in December 2021 and publicly disclosed on January 13, 2022 (ZDI Advisory, Adobe Bulletin).

The vulnerability exists within the processing of embedded fonts in Adobe Acrobat Reader DC. The specific flaw stems from the lack of validation of an object's existence prior to performing operations on it, leading to a use-after-free condition (CWE-416). The vulnerability has been assigned a CVSS v3.1 score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (ZDI Advisory, NVD).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code in the context of the current process on affected installations of Adobe Acrobat Reader DC. The exploitation could lead to complete compromise of the system with the same privileges as the current process (ZDI Advisory).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat Reader DC through the official Adobe security bulletin (Adobe Bulletin).