CVE-2019-8220
CRITICALAdobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Use-After-Free
Title source: llmDescription
Adobe Acrobat and Reader versions, 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb19-49.html
Scores
CVSS v3
9.8
EPSS
0.0410
EPSS Percentile
89.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (4)
adobe/acrobat_dc
15.006.30060 - 15.006.30504
adobe/acrobat_dc
15.008.20082 - 19.021.20047
adobe/acrobat_reader_dc
15.006.30060 - 15.006.30504
adobe/acrobat_reader_dc
15.008.20082 - 19.021.20047
Published
Oct 17, 2019
Tracked Since
Feb 18, 2026