CVEvulnerability

CVE-2019-8237

9.8 CRITICAL Published 2019-10-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-327

Description

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an insufficiently robust encryption vulnerability. Successful exploitation could lead to security feature bypass.

Affected configurations

• adobe acrobat dc (>= 15.006.30060 < 15.006.30499) • adobe acrobat dc (>= 15.008.20082 < 19.012.20036) • adobe acrobat dc (>= 17.011.30059 < 17.011.30144) • adobe acrobat reader dc (>= 15.006.30060 < 15.006.30499) • adobe acrobat reader dc (>= 15.008.20082 < 19.012.20036) • adobe acrobat reader dc (>= 17.011.30059 < 17.011.30144)

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References