CVE-2019-7026

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability has turned up in Adobe Acrobat and Reader, potentially paving the way for arbitrary code execution! Think of it like a user trying to place an order at a restaurant, only to have the waiter forget to remove the menu item that’s already been taken off the menu. The order goes through, but the kitchen has no idea what to do with it! If exploited, this vulnerability could allow an attacker to run any code on your system, which could be absolutely devastating. We're talking about unauthorized access to your files and potentially full control over the affected machine. That’s a major security lapse!

Put simply

Think of it like a user trying to place an order at a restaurant, only to have the waiter forget to remove the menu item that’s already been taken off the menu. The order goes through, but the kitchen has no idea what to do with it! This use-after-free vulnerability arises when a program continues to use a memory location after it has been freed, allowing attackers to manipulate memory and execute arbitrary code with the right conditions.

What to do

If exploited, this vulnerability could allow an attacker to run any code on your system, which could be absolutely devastating. We're talking about unauthorized access to your files and potentially full control over the affected machine. That’s a major security lapse! To defend against this vulnerability, ensure you're running Adobe Reader or Acrobat version 2019.010.20070 or later. Regularly update your software and implement strict security practices like limiting access to sensitive documents. Don't leave any doors open! You've got this! Keep your software updated, and you’ll help keep those pesky vulnerabilities at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.3th percentile
Published
2019-05-24T18:00Z
EPSS history
Timeline
  • 24 MAY 18:00Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5