CVE-2019-8167

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky type confusion vulnerability hides in Adobe Acrobat and Reader versions up to 2019.012.20040! 🚨 This flaw could let attackers run arbitrary code - yikes! Think of it like a chef mistakenly using salt instead of sugar in a recipe; it can lead to a disastrous outcome in the dish—and in this case, the system’s integrity! If exploited, an attacker could execute any code they want, potentially taking control of your system! This means they could access sensitive data or make unwanted changes, leading to catastrophic results for your privacy and data security.

Put simply

Think of it like a chef mistakenly using salt instead of sugar in a recipe; it can lead to a disastrous outcome in the dish—and in this case, the system’s integrity! This type confusion vulnerability occurs when the application mismanages data types, allowing attackers to manipulate memory and execute arbitrary code, essentially bypassing normal security checks.

What to do

If exploited, an attacker could execute any code they want, potentially taking control of your system! This means they could access sensitive data or make unwanted changes, leading to catastrophic results for your privacy and data security. To safeguard against this vulnerability, update Adobe Acrobat and Reader to the latest version immediately. Make sure to regularly check for updates to avoid running outdated software that can leave you exposed. You've got this! Stay proactive with your security and you'll keep those vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04427 · 91.3th percentile
Published
2019-10-17T20:13Z
EPSS history
Timeline
  • 17 OCT 20:13Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5