CVE-2018-19716

CVSS 3.0: 9.8 critical
EPSS: 10%p95
Published: Jan 18, 2019 · Jan 18, 2019
Modified: Jun 17, 2026

Analyze CVE-2018-19716 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe

Products: acrobat dc, acrobat reader dc

Weakness: CWE-787

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.7%)

In the news

3 stories

Vulnerability Spotlight: Adobe Acrobat Reader remote code execution

Cisco TalosApr 10, 12:58 UTC · Apr 10, 2019VulnerabilityExploitedCVE-2019-7125 CVE-2018-197163 · 1 read

December 2018 Patch Tuesday: Microsoft patches Windows zero-day exploited in the wild

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2018Exploit / PoCExploitedCVE-2018-8611 CVE-2018-8626 CVE-2018-8589+32 · 1 read

Vulnerability Spotlight: Adobe Acrobat Reader DC text field remote code execution vulnerability

Cisco TalosDec 11, 20:54 UTC · Dec 11, 2018VulnerabilityExploitedCVE-2018-197162 · 1 read