CVE-2019-7766

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…

published May 22, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚠️ A hidden danger lurks in Adobe's software! The use-after-free vulnerability in Acrobat and Reader could open the door for arbitrary code execution if exploited. 🔥 Think of it like a restaurant that serves food from their past menu items that they forgot to remove—once a dish has been taken off, it shouldn't be served again, but here, it's still on the shelves! This bug can let attackers serve up whatever malicious code they want, long after it should have been taken off the menu. If an attacker successfully exploits this vulnerability, they could run any code they desire on your system—think data breaches, unauthorized access, or even complete system takeover. This is absolutely devastating!

Put simply

Think of it like a restaurant that serves food from their past menu items that they forgot to remove—once a dish has been taken off, it shouldn't be served again, but here, it's still on the shelves! This bug can let attackers serve up whatever malicious code they want, long after it should have been taken off the menu. This vulnerability occurs when memory is freed but still accessed, which could allow an attacker to execute arbitrary code. Affected versions include Adobe Acrobat and Reader versions 2019.010.20100 and earlier, and 2017.011.30140 and earlier.

What to do

If an attacker successfully exploits this vulnerability, they could run any code they desire on your system—think data breaches, unauthorized access, or even complete system takeover. This is absolutely devastating! To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately. Check for patches that address this vulnerability and ensure that your software is up-to-date. Don't leave any old menus on the table! You can handle this! Follow these steps, and you'll keep your system safe from nasty surprises. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06581 · 93.8th percentile
Published
2019-05-22T13:27Z
EPSS history
Timeline
  • 22 MAY 13:27Z
    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…
    cvelistv5