ZeroHour

CVE-2017-16389

CVSS 3.0
8.8 high
EPSS
9%p95
Published
()
Modified
Description

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access. Successful exploitation could lead to arbitrary code execution.

Vendors
adobe
Products
acrobat, acrobat dc, acrobat reader, acrobat reader dc
Weakness
CWE-416
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news