CVE-2018-19708

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…

published January 18, 2019

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ An overlooked use-after-free vulnerability in Adobe Acrobat could open the door wide for attackers to execute arbitrary code! Imagine a restaurant that serves your favorite dish but forgets to remove the old plate before setting a new one down. If a sneaky diner swaps the old plate back, they could sneak in whatever they want — that's how this vulnerability can let an attacker take control! If exploited, this vulnerability could enable an attacker to execute malicious code on your system, potentially leading to a complete takeover of your device or data loss. This could be absolutely devastating, especially if you rely on Adobe Acrobat for important documents and communications.

Put simply

Imagine a restaurant that serves your favorite dish but forgets to remove the old plate before setting a new one down. If a sneaky diner swaps the old plate back, they could sneak in whatever they want — that's how this vulnerability can let an attacker take control! The vulnerability arises from improper memory management in Adobe Acrobat and Reader, allowing an attacker to leverage use-after-free scenarios to execute arbitrary code, thus compromising the security of the application.

What to do

If exploited, this vulnerability could enable an attacker to execute malicious code on your system, potentially leading to a complete takeover of your device or data loss. This could be absolutely devastating, especially if you rely on Adobe Acrobat for important documents and communications. Update Adobe Acrobat and Reader to the latest versions immediately to close this vulnerability. Check your software settings and ensure auto-updates are enabled to avoid falling victim to such issues in the future. You've got this! Stay vigilant, update your software, and keep your digital fortress strong! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05682 · 93.0th percentile
Published
2019-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…
    cvelistv5