CVE-2019-7112

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

🚨 A pesky use after free vulnerability lurks in older versions of Adobe Acrobat and Reader! If exploited, it could open the door to arbitrary code execution. 🔥 Think of it like a restaurant giving away food orders even after the customer leaves without paying – someone could swoop in and take what isn’t theirs! This vulnerability allows attackers to manipulate memory that should be off-limits, much like a chef mistakenly serving food that's already been cleared from the table. If an attacker manages to exploit this vulnerability, they could run any code of their choosing on the victim's system, potentially leading to complete control over the device. Imagine the chaos if someone could access sensitive documents, corrupt files, or even install harmful software! This could be absolutely devastating for users.

Put simply

Think of it like a restaurant giving away food orders even after the customer leaves without paying – someone could swoop in and take what isn’t theirs! This vulnerability allows attackers to manipulate memory that should be off-limits, much like a chef mistakenly serving food that's already been cleared from the table. This use after free vulnerability occurs when memory that is no longer needed is still accessible. Successful exploitation means that attackers can execute arbitrary code, which could compromise the system's integrity.

What to do

If an attacker manages to exploit this vulnerability, they could run any code of their choosing on the victim's system, potentially leading to complete control over the device. Imagine the chaos if someone could access sensitive documents, corrupt files, or even install harmful software! This could be absolutely devastating for users. To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately. Ensure you're running version 2020.012.20048 or later, as this addresses the vulnerability. Regularly check for updates to keep your applications secure. You've got this! Stay proactive with your updates and you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05116 · 92.3th percentile
Published
2019-05-23T16:55Z
EPSS history
Timeline
  • 23 MAY 16:55Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5