CVE-2021-44714 - CVE House
Back to Database
Status published Low CVE-2021-44714

Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts

Vulnerability Description

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which could be used by an attacker to mislead the user. In affected versions, this warning message does not include custom protocols when used by the sender. User interaction is required to abuse this vulnerability as they would need to click 'allow' on the warning message of a malicious file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44714

Credits & Attribution

No credits recorded in the NVD database.

References

More from Adobe

View All →
CVE-2025-64899
Acrobat Reader | Out-of-bounds Read (CWE-125)
High 7.8
CVE-2025-64898
ColdFusion | Insufficiently Protected Credentials (CWE-522)
Medium 5.3
CVE-2025-64897
ColdFusion | Improper Access Control (CWE-284)
Medium 5.6
CVE-2025-64896
Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Medium 5.5
CVE-2025-64894
DNG SDK | Integer Overflow or Wraparound (CWE-190)
Medium 5.5

Affected Vendor

Affected Software

Acrobat Reader
Vulnerable Versions:
unspecified

Timeline

Official Publish: January 14th, 2022
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-657

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.