CVE-2019-7772

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…

published May 22, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

🚨 A use after free vulnerability in Adobe Acrobat could let an attacker execute arbitrary code just by tricking you into opening a crafted file! 🔥 Think of it like a restaurant that leaves a table set with leftover meals that the waitstaff forgot to clear — an unsuspecting diner could take advantage of the situation and serve themselves whatever's left, potentially leading to a messy outcome. If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to data breaches, unauthorized access, or even total takeover of your device. This is pretty serious, as it creates an opening for attackers to manipulate your environment without your knowledge!

Put simply

Think of it like a restaurant that leaves a table set with leftover meals that the waitstaff forgot to clear — an unsuspecting diner could take advantage of the situation and serve themselves whatever's left, potentially leading to a messy outcome. This use after free vulnerability occurs due to improper management of memory in Adobe Acrobat and Reader, allowing an attacker to execute arbitrary code when a specially crafted PDF is opened by the user.

What to do

If exploited, this vulnerability could allow an attacker to run malicious code on your system, potentially leading to data breaches, unauthorized access, or even total takeover of your device. This is pretty serious, as it creates an opening for attackers to manipulate your environment without your knowledge! To keep your system safe, update to the latest versions of Adobe Acrobat and Reader to ensure you're protected. Specifically, versions later than 2019.010.20101, 2019.010.20099, 2017.011.30141, 2017.011.30139, 2015.006.30496, and 2015.006.30494 should be your goal. Don't forget to regularly check for updates! You've got this! Just follow these steps and you'll be back to safely reading PDFs in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06525 · 93.8th percentile
Published
2019-05-22T13:37Z
EPSS history
Timeline
  • 22 MAY 13:37Z
    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…
    cvelistv5