CVE-2019-7018

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

⚠️ There's a pesky use-after-free vulnerability lurking in Adobe Acrobat and Reader versions 2019.010.20069 and earlier! This one could allow attackers to execute arbitrary code – a potential minefield! 💣 Think of it like a restaurant that accidentally leaves the back door unlocked while serving customers. If someone sneaks through that door, they can wreak havoc in the kitchen without anyone noticing! If exploited, an attacker could take control of your system, leading to devastating consequences like data theft or even worse, complete takeover of your machine. It's like handing over the keys to a stranger!

Put simply

Think of it like a restaurant that accidentally leaves the back door unlocked while serving customers. If someone sneaks through that door, they can wreak havoc in the kitchen without anyone noticing! This use-after-free vulnerability occurs when the application continues to use memory that has already been freed, which can be manipulated to execute arbitrary code. It's a sneaky oversight that can lead to severe exploitation!

What to do

If exploited, an attacker could take control of your system, leading to devastating consequences like data theft or even worse, complete takeover of your machine. It's like handing over the keys to a stranger! To protect yourself, update Adobe Acrobat and Reader to the latest versions as soon as possible. Make sure to check for any available patches and apply them without delay! You've got this! With these updates, you'll be back in the driver's seat of your security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.3th percentile
Published
2019-05-24T17:51Z
EPSS history
Timeline
  • 24 MAY 17:51Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5