CVE-2019-7066

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

⚠️ An untrusted pointer dereference vulnerability lurks in Adobe Acrobat and Reader, just waiting for someone to trip over it! 🌪️ Think of it like a waiter who trusts a random customer’s order without checking it against the menu — if they don’t verify, they could end up serving a dish that no one asked for, potentially causing chaos in the kitchen! If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, leading to disastrous consequences like data breaches or unauthorized access. Imagine a stranger taking the stage to perform a concert that hijacks the entire event!

Put simply

Think of it like a waiter who trusts a random customer’s order without checking it against the menu — if they don’t verify, they could end up serving a dish that no one asked for, potentially causing chaos in the kitchen! This vulnerability arises from a flaw in how Adobe Acrobat and Reader handle pointers, allowing attackers to dereference untrusted memory locations. Essentially, it’s like reading a book from the wrong shelf — completely unrelated content could spill into your application.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, leading to disastrous consequences like data breaches or unauthorized access. Imagine a stranger taking the stage to perform a concert that hijacks the entire event! To stay safe, upgrade Adobe Acrobat and Reader to version 2019.010.20070 or later. If you’re running an older version, consider removing or disabling it until an upgrade is feasible. Regularly check for updates to ensure you’re protected! You’ve got this! Stay vigilant and keep your software updated, and you’ll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.2th percentile
Published
2019-05-24T18:53Z
EPSS history
Timeline
  • 24 MAY 18:53Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5