CVE-2019-8257

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…

published January 27, 2020

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Adobe Acrobat and Reader could let attackers execute arbitrary code with just a clever trick! Think of this as a delivery service that forgets to check if a package was already delivered before trying to send it again; it opens the door for someone to hijack that delivery altogether! 📦 If exploited, an attacker could gain control over your system, leading to data breaches, unauthorized access, or worse, malicious software installation—absolutely devastating! This could turn your trusted document reader into a gateway for chaos.

Put simply

Think of this as a delivery service that forgets to check if a package was already delivered before trying to send it again; it opens the door for someone to hijack that delivery altogether! 📦 This vulnerability arises from improper memory management, specifically a use-after-free error, where a program continues to access memory after it's been released, allowing arbitrary code execution on affected versions.

What to do

If exploited, an attacker could gain control over your system, leading to data breaches, unauthorized access, or worse, malicious software installation—absolutely devastating! This could turn your trusted document reader into a gateway for chaos. Update Adobe Acrobat and Reader to version 2019.012.20036 or later and 2017.011.30144 or later as soon as possible. Regularly check for updates to stay protected against vulnerabilities like these! You've got this! Patch up and fortify your defenses—you're now a security hero! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04073 · 90.6th percentile
Published
2020-01-27T23:12Z
EPSS history
Timeline
  • 27 JAN 23:12Z
    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier…
    cvelistv5