CVEvulnerability
CVE-2019-7069
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-05-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-843
Description
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
Affected configurations
• adobe acrobat dc (>= 15.006.30060 < 15.006.30475)
• adobe acrobat dc (>= 15.008.20082 < 19.010.20091)
• adobe acrobat dc (>= 17.011.30059 < 17.011.30120)
• adobe acrobat reader dc (>= 15.006.30060 < 15.006.30475)
• adobe acrobat reader dc (>= 15.008.20082 < 19.010.20091)
• adobe acrobat reader dc (>= 17.011.30059 < 17.011.30120)
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://helpx.adobe.com/security/products/acrobat/apsb19-07.html Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-19-209/ Third Party Advisory
- https://helpx.adobe.com/security/products/acrobat/apsb19-07.html Patch, Vendor Advisory