CVE-2019-16444

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…

published December 19, 2019

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky privilege escalation flaw in Adobe Acrobat and Reader can let an attacker plant malicious binaries into folders without proper checks! 🚨 Think of it like an employee being able to sneak into a restricted area of the office because a security guard is on break — they can access files and take actions they shouldn't be allowed to! If exploited, this vulnerability could allow an attacker to gain elevated privileges on the system, leading to unauthorized access to sensitive information or the ability to execute malicious code. This could result in a significant breach of security, potentially compromising entire networks!

Put simply

Think of it like an employee being able to sneak into a restricted area of the office because a security guard is on break — they can access files and take actions they shouldn't be allowed to! This vulnerability arises from default folder privileges that can be exploited through binary planting, allowing malicious files to be executed with higher privileges than intended in Adobe Acrobat and Reader versions up to 2019.021.20056 and several earlier versions.

What to do

If exploited, this vulnerability could allow an attacker to gain elevated privileges on the system, leading to unauthorized access to sensitive information or the ability to execute malicious code. This could result in a significant breach of security, potentially compromising entire networks! To address this vulnerability, ensure that your Adobe Acrobat and Reader are updated to the latest versions to mitigate the risk. Regularly review file and folder permissions to avoid unauthorized access. Additionally, consider implementing stricter user access controls. 🛡️ You've got this! By staying proactive and following these steps, you're one step closer to securing your systems! ✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03194 · 88.0th percentile
Published
2019-12-19T14:29Z
EPSS history
Timeline
  • 19 DEC 14:29Z
    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…
    cvelistv5