CVE-2019-8225: Use After Free
Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Affected Software
Remediation
Event History
Frequently Asked Questions
What must an attacker do to exploit this vulnerability?
An attacker must persuade a user to interact with malicious content. The CVSS vector indicates the issue is remotely reachable, requires no attacker privileges, has low attack complexity, and requires user interaction.
Which installations are within the affected version ranges?
Affected ranges include Acrobat and Reader releases 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. The listed products are Adobe Acrobat DC and Adobe Acrobat Reader DC.
What is the impact of successful exploitation?
Successful exploitation could result in arbitrary code execution. The CVSS rating indicates high potential impact to confidentiality, integrity, and availability.
Is a fix available?
Yes. A patch is available for this vulnerability.