CVE-2019-7120

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat could let attackers execute arbitrary code! This is not something you want on your watch! 🔥 Think of out-of-bounds writes like a waiter who accidentally serves dessert before the main course — it can throw the whole dining experience off and lead to unwanted surprises in your meal. This is similar to how this vulnerability can disrupt the functionality of your system. If successfully exploited, an attacker could run any code they want with the same privileges as the victim, leading to data breaches, system compromises, or worse. This vulnerability could be a backdoor into sensitive information, making it absolutely critical to address!

Put simply

Think of out-of-bounds writes like a waiter who accidentally serves dessert before the main course — it can throw the whole dining experience off and lead to unwanted surprises in your meal. This is similar to how this vulnerability can disrupt the functionality of your system. This out-of-bounds write vulnerability allows for memory corruption, enabling an attacker to execute arbitrary code in the context of the user running the affected Adobe software versions, including Acrobat and Reader.

What to do

If successfully exploited, an attacker could run any code they want with the same privileges as the victim, leading to data breaches, system compromises, or worse. This vulnerability could be a backdoor into sensitive information, making it absolutely critical to address! To protect yourself, update Adobe Acrobat and Reader to the latest version immediately. If you're running versions earlier than 2019.010.20098, 2017.011.30127, or 2015.006.30482, make sure to apply the latest patches! You've got this! With these updates, you'll keep your system safe and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05842 · 93.2th percentile
Published
2019-05-23T17:07Z
EPSS history
Timeline
  • 23 MAY 17:07Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5