CVE-2019-8161

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

⚡ A sneaky type confusion vulnerability in Adobe Acrobat and Reader could let attackers run their own code. Yikes! 🔥 Think of it like a restaurant where the chef mistakenly uses a vegetable instead of a meat, leading to an unappetizing surprise on your plate. This confusion allows an attacker to serve up their own malicious code instead of the intended content. If successfully exploited, an attacker could gain the ability to execute arbitrary code on your system, which means the potential for data theft, unauthorized access, or even total control over your computer. Picture an uninvited guest just waltzing into your home and rifling through your belongings—absolutely devastating!

Put simply

Think of it like a restaurant where the chef mistakenly uses a vegetable instead of a meat, leading to an unappetizing surprise on your plate. This confusion allows an attacker to serve up their own malicious code instead of the intended content. This type confusion vulnerability occurs when Adobe Acrobat and Reader mix up data types, allowing attackers to manipulate memory and execute their code under certain conditions, bypassing normal security measures.

What to do

If successfully exploited, an attacker could gain the ability to execute arbitrary code on your system, which means the potential for data theft, unauthorized access, or even total control over your computer. Picture an uninvited guest just waltzing into your home and rifling through your belongings—absolutely devastating! To protect yourself, immediately update your Adobe Acrobat and Reader to the latest versions: 2019.012.20041 for 2019 users, 2017.011.30149 for 2017 users, or 2015.006.30504 for 2015 users. Regularly check for updates to ensure ongoing protection against such vulnerabilities. You've got this! Stay vigilant and keep your software updated to maintain your security hero status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04427 · 91.3th percentile
Published
2019-10-17T20:11Z
EPSS history
Timeline
  • 17 OCT 20:11Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5