CVE-2019-8025

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

⚠️ A crafty 'use after free' vulnerability in Adobe Acrobat could let attackers slip in arbitrary code like a magician pulling a rabbit from a hat! 🎩 Think of it as a waiter serving you a dish that’s already been taken away — it might look fine, but it could come with unexpected extras. In this case, the vulnerability lets malicious code execute in a memory area that should no longer be available. If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, potentially leading to data breaches or system hijacking. 🤯 While there are no known exploits at this moment, it’s crucial not to let your guard down!

Put simply

Think of it as a waiter serving you a dish that’s already been taken away — it might look fine, but it could come with unexpected extras. In this case, the vulnerability lets malicious code execute in a memory area that should no longer be available. This 'use after free' vulnerability occurs when an application continues to use memory after it has been freed, potentially allowing an attacker to place malicious code in that memory space and execute it.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system, potentially leading to data breaches or system hijacking. 🤯 While there are no known exploits at this moment, it’s crucial not to let your guard down! Update Adobe Acrobat and Reader to the latest versions immediately to mitigate this risk. Specifically, versions after 2019.012.20035, 2017.011.30143, and 2015.006.30498 should be installed. Regularly check for updates as part of your security hygiene routine! 🛡️ You've got this! Stay vigilant and keep your software updated to protect yourself from sneaky threats like this! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04371 · 91.2th percentile
Published
2019-08-20T19:47Z
EPSS history
Timeline
  • 20 AUG 19:47Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5