CVE-2019-8036

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published August 20, 2019

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A classic case of 'use after free'! Adobe Acrobat and Reader have a vulnerability that could let attackers run arbitrary code, and it’s affecting multiple versions. 🔥 Think of it like a restaurant that's allowed to serve a dish even after the ingredients have spoiled — it’s an invitation for a disaster! Without proper checks, someone could potentially serve something very harmful indeed. If an attacker successfully exploits this vulnerability, they could have full control over the system, allowing for devastating consequences like stealing sensitive information or spreading malware. It's a security nightmare that no one wants to face!

Put simply

Think of it like a restaurant that's allowed to serve a dish even after the ingredients have spoiled — it’s an invitation for a disaster! Without proper checks, someone could potentially serve something very harmful indeed. This 'use after free' vulnerability occurs when the application attempts to access memory after it has already been freed, leading to potential arbitrary code execution.

What to do

If an attacker successfully exploits this vulnerability, they could have full control over the system, allowing for devastating consequences like stealing sensitive information or spreading malware. It's a security nightmare that no one wants to face! To mitigate this risk, update Adobe Acrobat and Reader to the latest versions immediately. Ensure that you're on at least version 2019.012.20036 or later to patch this flaw and keep your system secure! You’ve got this! Just follow these steps, and you’ll turn this vulnerability into a distant memory! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04888 · 92.0th percentile
Published
2019-08-20T19:53Z
EPSS history
Timeline
  • 20 AUG 19:53Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5