CVE-2019-7792

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…

published May 22, 2019

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

⚡ There's a sneaky use after free vulnerability lurking in Adobe Acrobat and Reader that could let attackers run their own code! Think of it like a restaurant that keeps serving dishes even after the chef has left the kitchen—once the resource has been freed, it can still get used unexpectedly! If exploited, an attacker could execute arbitrary code on your system, potentially stealing sensitive information or causing havoc. This could lead to a devastating compromise of your system's integrity, leaving files and data exposed to misuse.

Put simply

Think of it like a restaurant that keeps serving dishes even after the chef has left the kitchen—once the resource has been freed, it can still get used unexpectedly! This vulnerability occurs when the software continues to access memory after it has been freed, allowing attackers to hijack control and run their own code. Specifically, it affects multiple versions of Adobe Acrobat and Reader.

What to do

If exploited, an attacker could execute arbitrary code on your system, potentially stealing sensitive information or causing havoc. This could lead to a devastating compromise of your system's integrity, leaving files and data exposed to misuse. To safeguard yourself, update Adobe Acrobat and Reader to the latest versions immediately, as patches are available. Regularly check for updates to ensure all software is running the latest security fixes. You've got this! With these updates, you'll be protecting your system like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06525 · 93.8th percentile
Published
2019-05-22T14:12Z
EPSS history
Timeline
  • 22 MAY 14:12Z
    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…
    cvelistv5