CVE-2019-16463

—

CVSS 3.1

9.8 critical

EPSS

5%p92

Published

Dec 19, 2019 (Dec 19, 2019)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Weakness: CWE-119
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.4%)

In the news1 stories

Vulnerability Spotlight: Information leak vulnerability in Adobe Acrobat Reader

Cisco TalosDec 10, 19:48 UTC · Dec 10, 2019Vulnerability in the wildCVE-2019-16463