CVE-2019-8186

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

⚠️ An out-of-bounds write vulnerability in Adobe Acrobat & Reader could let attackers run wild! Imagine your printer accepting any document without checking the sender. 📄💥 This vulnerability is like having a mailroom that accepts any package without verifying the sender's identity—dangerous items can slip through unnoticed and create chaos inside! If successfully exploited, an attacker could execute arbitrary code on your system, leading to a potential takeover of your machine. This means they could access sensitive information or even control your device as if they were you! Yikes!

Put simply

This vulnerability is like having a mailroom that accepts any package without verifying the sender's identity—dangerous items can slip through unnoticed and create chaos inside! This out-of-bounds write vulnerability allows attackers to manipulate memory beyond the intended limits, potentially leading to the execution of malicious code.

What to do

If successfully exploited, an attacker could execute arbitrary code on your system, leading to a potential takeover of your machine. This means they could access sensitive information or even control your device as if they were you! Yikes! If you're using Adobe Acrobat or Reader versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, or 2015.006.30503 and earlier, make sure to update to the latest version immediately. Regularly check for updates to keep your software secure! You've got this! Stay proactive, update your software, and keep your system safe from threats! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03849 · 90.1th percentile
Published
2019-10-17T20:19Z
EPSS history
Timeline
  • 17 OCT 20:19Z
    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5