CVE-2019-7128

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…

published May 23, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky type confusion vulnerability lurks in Adobe Acrobat and Reader! It affects several versions, including those released before 2019.010.20098. 🚨 Think of it as a restaurant that misidentifies the orders, serving you someone else’s meal instead of your own — this can result in unexpected and potentially harmful 'dishes' served up right on your system. If exploited, this could allow attackers to execute arbitrary code, giving them the keys to your digital kitchen. Imagine a guest who walks in and starts cooking whatever they want, leaving you with a mess to clean up.

Put simply

Think of it as a restaurant that misidentifies the orders, serving you someone else’s meal instead of your own — this can result in unexpected and potentially harmful 'dishes' served up right on your system. This type confusion vulnerability in Adobe Acrobat and Reader allows an attacker to manipulate data types, potentially leading to arbitrary code execution on the host system.

What to do

If exploited, this could allow attackers to execute arbitrary code, giving them the keys to your digital kitchen. Imagine a guest who walks in and starts cooking whatever they want, leaving you with a mess to clean up. To safeguard against this, update Adobe Acrobat and Reader to version 2019.010.20099 or later. Regularly check for updates and apply them promptly to maintain security. Additionally, consider implementing application whitelisting to reduce risk. You've got this! Following these steps will help keep your system secure and your digital kitchen clean. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06511 · 93.8th percentile
Published
2019-05-23T17:04Z
EPSS history
Timeline
  • 23 MAY 17:04Z
    Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier…
    cvelistv5