9.8crit
CVE-2019-8024in critical feed1 exploit
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ea…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
15.1%
percentile 97%
Public exploits
1
Exploit-DB
Summary
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
Exploit prediction (EPSS)
15.12% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.
Exploits and detections
- EDB-47271 Adobe Acrobat Reader DC for Windows - Use-After-Free due to Malformed JP2 Stream · dos · 2019-08-15
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Adobe Adobe Acrobat and Reader
Classification
- Weakness
- CWE-416 Use After Free
References
- helpx.adobe.com /security/products/acrobat/apsb19-41.html · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2019-8024
- NVD: CVE-2019-8024
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.