CVE-2019-7115: High severity Adobe Acrobat DC vulnerability

Q: What is the severity of CVE-2019-7115?

CVE-2019-7115 is classified as a medium severity vulnerability.

Q: How do I fix CVE-2019-7115?

To fix CVE-2019-7115, update Adobe Acrobat and Reader to the latest version available.

Q: Which versions are affected by CVE-2019-7115?

CVE-2019-7115 affects Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2017.011.30127 and earlier, and 2015.006.30482 and earlier.

Q: What kind of vulnerability is CVE-2019-7115?

CVE-2019-7115 is an out-of-bounds read vulnerability that may lead to information disclosure.

Q: Can CVE-2019-7115 be exploited remotely?

Yes, CVE-2019-7115 can potentially be exploited remotely, allowing attackers to access sensitive information.

Published May 23, 2019

Updated

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30493

Adobe Acrobat DC>=15.008.20082<19.010.20099

Adobe Acrobat DC>=17.011.30056<17.011.30138

Adobe Acrobat Reader DC>=15.006.30060<15.006.30493

Adobe Acrobat Reader DC>=15.008.20082<19.010.20099

Adobe Acrobat Reader DC>=17.011.30059<17.011.30138

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-17.html

Event History

May 23, 2019

CVE Published

via MITRE·05:22 PM

Data Sourced

via MITRE·05:22 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-7115?

CVE-2019-7115 is classified as a medium severity vulnerability.

How do I fix CVE-2019-7115?