CVE-2018-19698

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…

published January 18, 2019

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Adobe Acrobat could let attackers execute code at will! 🎭 Think of it like a restaurant that keeps using the same table after it’s been cleared, accidentally serving a meal to the wrong customer. In this case, the memory that should be freed keeps being accessed, leading to potential chaos! If exploited, this vulnerability could allow a malicious actor to run arbitrary code on your machine. This means they could potentially take control, access sensitive information, or disrupt your work – quite the uninvited guest!

Put simply

Think of it like a restaurant that keeps using the same table after it’s been cleared, accidentally serving a meal to the wrong customer. In this case, the memory that should be freed keeps being accessed, leading to potential chaos! This use-after-free vulnerability happens when Adobe Acrobat fails to properly manage memory, allowing an attacker to manipulate freed memory space and execute arbitrary code.

What to do

If exploited, this vulnerability could allow a malicious actor to run arbitrary code on your machine. This means they could potentially take control, access sensitive information, or disrupt your work – quite the uninvited guest! To protect yourself, update Adobe Acrobat and Reader to the latest versions. Ensure to check your current version against the latest available and consider regular maintenance to keep software up to date. 🛡️ You've got this! Keep your software updated, and you’ll stay one step ahead of potential threats! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06235 · 93.5th percentile
Published
2019-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…
    cvelistv5