CVE-2018-19725

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Mar 5, 2019 (Mar 5, 2019)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news2 stories

Adobe Issues Emergency Patches for Two Critical Flaws in Acrobat and Reader

The Hacker NewsJan 4, 08:13 UTC · Jan 4, 2019Vulnerability CVE-2018-16011 CVE-2018-19725

Adobe addressed two critical flaws in Adobe Acrobat, Reader

Security AffairsJan 3, 22:48 UTC · Jan 3, 2019Vulnerability CVE-2018-16011 CVE-2018-19725