CVE-2019-7088

CRITICAL

Adobe Acrobat and Reader <2019.010.20098 - Use After Free

Title source: llm
STIX 2.1

Description

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb19-17.html
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107809

Scores

CVSS v3 9.8
EPSS 0.0658
EPSS Percentile 93.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (4)
adobe/acrobat_dc 15.006.30060 - 15.006.30482
adobe/acrobat_dc 15.008.20082 - 19.010.20098
adobe/acrobat_reader_dc 15.006.30060 - 15.006.30482
adobe/acrobat_reader_dc 15.008.20082 - 19.010.20098
Published May 23, 2019
Tracked Since Feb 18, 2026