CVE-2019-8028

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

🚨 A crafty use after free vulnerability in Adobe Acrobat could let attackers execute arbitrary code, which is like a mischievous guest slipping into your hotel room while you're not looking! Think of it as a hotel that forgot to check the guest list — anyone can waltz in and take advantage of the unguarded rooms, potentially causing chaos. This vulnerability allows an attacker to manipulate memory after it's been freed, opening the door to all sorts of nefarious activities. If exploited, this could allow attackers to run any code they choose on your system, which could lead to unauthorized access, data theft, or even complete system compromise. It’s a recipe for disaster if the wrong person gets their hands on it!

Put simply

Think of it as a hotel that forgot to check the guest list — anyone can waltz in and take advantage of the unguarded rooms, potentially causing chaos. This vulnerability allows an attacker to manipulate memory after it's been freed, opening the door to all sorts of nefarious activities. This vulnerability arises from improper handling of memory in Adobe Acrobat and Reader, enabling an attacker to execute arbitrary code following the release of memory. Versions affected include 2019.012.20035 and earlier, 2017.011.30142 and earlier, and 2015.006.30497 and earlier.

What to do

If exploited, this could allow attackers to run any code they choose on your system, which could lead to unauthorized access, data theft, or even complete system compromise. It’s a recipe for disaster if the wrong person gets their hands on it! To safeguard your systems, update Adobe Acrobat and Reader to the latest version, ensuring you are running a build that addresses this vulnerability. Regularly check for security patches and updates to stay protected! You've got this! Stay vigilant and secure your software to keep those sneaky attackers out! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04334 · 91.2th percentile
Published
2019-08-20T19:51Z
EPSS history
Timeline
  • 20 AUG 19:51Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5