CVE-2019-7076

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…

published May 24, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

⚠️ Beware of the pointer! Adobe Acrobat and Reader versions prior to 2019.010.20069 have a sneaky flaw that could let attackers run arbitrary code with just the right exploit. 🔥 Think of this vulnerability like a restaurant that allows anyone to leave a custom order without verifying the chef’s approval — if the order is bad, it can ruin the whole kitchen! If successfully exploited, an attacker could execute any code on the user's system, potentially leading to severe compromises. This means a malicious PDF could serve as a gateway for a full takeover of your device, putting all your sensitive documents and data at risk!

Put simply

Think of this vulnerability like a restaurant that allows anyone to leave a custom order without verifying the chef’s approval — if the order is bad, it can ruin the whole kitchen! The vulnerability arises from an untrusted pointer dereference, allowing attackers to manipulate how memory is accessed and executed in Adobe Acrobat and Reader, which can lead to arbitrary code execution.

What to do

If successfully exploited, an attacker could execute any code on the user's system, potentially leading to severe compromises. This means a malicious PDF could serve as a gateway for a full takeover of your device, putting all your sensitive documents and data at risk! To mitigate this risk, users should update their Adobe Acrobat and Reader to version 2019.010.20069 or later immediately. Regularly check for updates and enable automatic updates to keep your software secure! You've got this! Stay proactive, and you’ll keep those pesky vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04413 · 91.3th percentile
Published
2019-05-24T18:59Z
EPSS history
Timeline
  • 24 MAY 18:59Z
    Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier…
    cvelistv5