CVE-2019-7095

—

CVSS 3.0

9.8 critical

EPSS

9%p95

Published

May 24, 2019 (May 24, 2019)

Modified

Jun 17, 2026

Description

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: digital editions
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.7%)

In the news2 stories

Adobe Releases Patches for Critical Flaws in Photoshop CC and Digital Edition

The Hacker NewsMar 12, 16:22 UTC · Mar 12, 2019Vulnerability in the wildCVE-2019-7094 CVE-2019-7095 CVE-2019-7816

Adobe Patch Tuesday updates address critical in Photoshop, Digital Editions

Security AffairsMar 12, 14:42 UTC · Mar 12, 2019Vulnerability CVE-2019-7095 CVE-2019-7094