CVE-2018-19715

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…

published January 18, 2019

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ It’s a wild ride in Adobe Acrobat and Reader! A use-after-free vulnerability in certain versions could let attackers run their code like a magician pulling rabbits out of hats! 🎩 Think of this vulnerability as a restaurant that keeps serving meals to a table after they’ve left — it creates a situation where anyone can waltz in and claim leftover plates. The server doesn’t check if the table is actually occupied, leaving it open for mischief! If exploited, this flaw could allow attackers to execute arbitrary code, potentially leading to malicious software running on your system without you even lifting a finger. Imagine the chaos that could unfold if someone takes control of your computer!

Put simply

Think of this vulnerability as a restaurant that keeps serving meals to a table after they’ve left — it creates a situation where anyone can waltz in and claim leftover plates. The server doesn’t check if the table is actually occupied, leaving it open for mischief! This use-after-free vulnerability in Adobe Acrobat and Reader occurs when the program fails to properly manage memory after an object is freed, allowing an attacker to manipulate the program's flow and execute their own code.

What to do

If exploited, this flaw could allow attackers to execute arbitrary code, potentially leading to malicious software running on your system without you even lifting a finger. Imagine the chaos that could unfold if someone takes control of your computer! To safeguard your system, update Adobe Acrobat and Reader to the latest versions immediately. Regularly check for security patches and enable automatic updates if available. Don’t let this vulnerability linger! You've got this! With a quick update, your security hero status will shine bright! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05682 · 93.0th percentile
Published
2019-01-18T17:00Z
EPSS history
Timeline
  • 18 JAN 17:00Z
    Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version…
    cvelistv5