CVE-2019-16454

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…

published December 19, 2019

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat could let attackers execute code with a simple PDF! 🚨 Think of it like a restaurant where the chef is allowed to cook without checking the menu — a rogue order could lead to a surprise ingredient landing on your plate! If exploited, this vulnerability could allow an attacker to run arbitrary code on the victim's system, potentially taking control of everything from sensitive files to system settings. This is not just an inconvenience; it could lead to devastating data breaches or system failures!

Put simply

Think of it like a restaurant where the chef is allowed to cook without checking the menu — a rogue order could lead to a surprise ingredient landing on your plate! In Adobe Acrobat and Reader versions 2019.021.20056 and earlier, this vulnerability allows for an out-of-bounds write, meaning an attacker can manipulate memory allocations and execute arbitrary code.

What to do

If exploited, this vulnerability could allow an attacker to run arbitrary code on the victim's system, potentially taking control of everything from sensitive files to system settings. This is not just an inconvenience; it could lead to devastating data breaches or system failures! Update your Adobe Acrobat and Reader to the latest versions immediately. Check for version 2019.021.20057 or newer to stay secure. Don't skip this step — it’s crucial! You've got this! By taking action now, you'll bolster your defenses in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04324 · 91.1th percentile
Published
2019-12-19T14:50Z
EPSS history
Timeline
  • 19 DEC 14:50Z
    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and…
    cvelistv5