First published: Mon Jan 27 2020(Updated: )
Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Dc | >=15.006.30060<15.006.30464 | |
Adobe Acrobat Dc | >=15.008.20082<19.010.20069 | |
Adobe Acrobat Dc | >=17.011.30059<17.011.30113 | |
Adobe Acrobat Reader DC | >=15.006.30060<15.006.30464 | |
Adobe Acrobat Reader DC | >=15.008.20082<19.010.20069 | |
Adobe Acrobat Reader DC | >=17.011.30059<17.011.30113 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2019-7131.
The severity of CVE-2019-7131 is critical with a CVSS score of 9.8.
Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2017.011.30110 and earlier, and 2015.006.30461 and earlier are affected by CVE-2019-7131.
Successful exploitation of CVE-2019-7131 could lead to arbitrary code execution.
To fix CVE-2019-7131, please update Adobe Acrobat and Reader to the latest version available.