CVE-2019-7834

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…

published May 22, 2019

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

⚠️ A crafty use after free vulnerability lurks in Adobe Acrobat and Reader, waiting for the unwary! 🔍 Think of it like a restaurant keeping a table reserved for a customer who has already left — they could return and cause chaos before anyone realizes they’re not actually there! 🍽️ If exploited, an attacker could gain control of your system, running arbitrary code and potentially wreaking havoc with your documents or data. This could lead to data breaches or unauthorized access, which is absolutely devastating! 🔥

Put simply

Think of it like a restaurant keeping a table reserved for a customer who has already left — they could return and cause chaos before anyone realizes they’re not actually there! 🍽️ This vulnerability occurs when the program attempts to access memory after it has been freed, creating a situation where an attacker can execute arbitrary code. Essentially, it's like leaving the door to your system open after a guest has left!

What to do

If exploited, an attacker could gain control of your system, running arbitrary code and potentially wreaking havoc with your documents or data. This could lead to data breaches or unauthorized access, which is absolutely devastating! 🔥 Update Adobe Acrobat and Reader to the latest versions immediately, specifically those released after the vulnerable versions mentioned. Always enable automatic updates to keep your software secure! 🛡️ You've got this! By taking these steps, you’ll be stepping up as a security hero, protecting yourself and your data! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05167 · 92.4th percentile
Published
2019-05-22T18:01Z
EPSS history
Timeline
  • 22 MAY 18:01Z
    Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier…
    cvelistv5