CVE-2019-7070 - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability

Back Back to CVE browser

HIGH

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability

Published May 24, 2019

8.8

HIGH

CVSS 3.0

EPSS 4.51%

Description

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected products

Vendor Adobe Product Adobe Acrobat and Reader Default
unknown
Affected
- 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe Acrobat and Reader	unknown	Affected 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16621
Advisory
https://helpx.adobe.com/security/products/acrobat/apsb19-07.html
x_refsource_CONFIRMPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-19-210/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16621		Advisory
https://helpx.adobe.com/security/products/acrobat/apsb19-07.html		x_refsource_CONFIRMPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-19-210/		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published May 24, 2019

Updated Aug 4, 2024

Reserved Jan 28, 2019

Link CVE-2019-7070

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-7070

Red Hat

No data

ENISA EUVD

Assigner adobe

Published May 24, 2019

Updated Aug 4, 2024

Link EUVD-2019-16621

GitHub

No data