CVE-2019-8237

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published October 23, 2019

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

⚠️ A weak encryption setup in Adobe Acrobat and Reader could let attackers sidestep key security features like they’re taking a shortcut on a road map! 🔒 Think of this as a hotel with a front desk that doesn’t ask for ID. With no verification, anyone could walk in and access restricted areas—or in this case, sensitive data! If exploited, an attacker could bypass crucial security measures, potentially exposing sensitive documents or information. This scenario could lead to unauthorized access, making your documents vulnerable to prying eyes!

Put simply

Think of this as a hotel with a front desk that doesn’t ask for ID. With no verification, anyone could walk in and access restricted areas—or in this case, sensitive data! The vulnerability stems from insufficiently robust encryption in Adobe Acrobat and Reader across several versions, allowing security feature bypasses that compromise document integrity.

What to do

If exploited, an attacker could bypass crucial security measures, potentially exposing sensitive documents or information. This scenario could lead to unauthorized access, making your documents vulnerable to prying eyes! To safeguard against this, ensure that you're using the latest versions of Adobe Acrobat and Reader. Check for updates and implement any available patches to strengthen encryption protocols. Regularly review settings to ensure robust security measures are in place. You've got this! By patching your software, you’ll keep your documents under wraps and your security hero status activated! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02801 · 86.4th percentile
Published
2019-10-23T20:46Z
EPSS history
Timeline
  • 23 OCT 20:46Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5