CVE-2019-7088

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A classic use after free vulnerability is back to haunt Adobe Acrobat and Reader users! 📄🕵️‍♂️ Think of it like leaving a door wide open in a fancy restaurant — while you’re still dining, an intruder can waltz in and take over the kitchen without anyone noticing. That’s the risk here! If exploited, attackers could execute arbitrary code on your system, potentially gaining full control! Imagine a malicious chef aligned with a hacker, cooking up chaos while you’re blissfully unaware. Your data, privacy, and system integrity are all at stake!

Put simply

Think of it like leaving a door wide open in a fancy restaurant — while you’re still dining, an intruder can waltz in and take over the kitchen without anyone noticing. That’s the risk here! The vulnerability occurs when Adobe Acrobat and Reader fail to properly manage memory, allowing attackers to manipulate memory post-deallocation. This exploitation could lead to arbitrary code execution, essentially giving hackers a free pass into your system.

What to do

If exploited, attackers could execute arbitrary code on your system, potentially gaining full control! Imagine a malicious chef aligned with a hacker, cooking up chaos while you’re blissfully unaware. Your data, privacy, and system integrity are all at stake! Immediately update Adobe Acrobat and Reader to the latest versions to mitigate this risk. Regularly check for updates and consider implementing strict access controls to limit exposure. Don't let your defenses down! You've got this! Stay updated and you'll keep the hackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06419 · 93.7th percentile
Published
2019-05-23T16:59Z
EPSS history
Timeline
  • 23 MAY 16:59Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5