CVE-2019-8220

Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…

published October 17, 2019

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability lurks in Adobe Acrobat and Reader that could lead to arbitrary code execution! Think of it like a server issuing a meal ticket that should be recycled but instead gets reused by a hungry diner — only now, the kitchen prepares whatever they request! 🎟️🧑‍🍳 If an attacker successfully exploits this flaw, they could run anything they desire on your machine — read your files, steal sensitive data, or even take complete control. It's a serious invasion of privacy and trust, opening the door to chaos!

Put simply

Think of it like a server issuing a meal ticket that should be recycled but instead gets reused by a hungry diner — only now, the kitchen prepares whatever they request! 🎟️🧑‍🍳 This use-after-free vulnerability occurs when the software attempts to access a memory area that has already been freed, allowing an attacker to execute arbitrary code in the context of the user.

What to do

If an attacker successfully exploits this flaw, they could run anything they desire on your machine — read your files, steal sensitive data, or even take complete control. It's a serious invasion of privacy and trust, opening the door to chaos! To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately! Ensure that you're running at least version 2019.012.20041 or later. It's also a good practice to regularly check for updates to keep your software secure. 🛡️ You've got this! By taking these steps, you can lock down your software and safeguard your system from potential threats. 🔒😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04100 · 90.7th percentile
Published
2019-10-17T20:26Z
EPSS history
Timeline
  • 17 OCT 20:26Z
    Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and…
    cvelistv5