CVE-2019-7772

CRITICAL 9.8CVE-2019-7772 · Published 22/05/2019 · updated 17/06/2026

In short

CVE-2019-7772 is a CRITICAL (CVSS 9.8) vulnerability affecting acrobat dc (adobe), acrobat reader dc (adobe).
Chance of exploitation in the next 30 days (EPSS): 6.5%, higher than 93.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
acrobat dc adobe	`≥ 15.006.30060, ≤ 15.006.30495≥ 15.008.20082, ≤ 19.010.20100≥ 17.011.30056, ≤ 17.011.30140`	No fix yet
acrobat reader dc adobe	`≥ 15.006.30060, ≤ 15.006.30493≥ 15.008.20082, ≤ 19.010.20099≥ 17.011.30059, ≤ 17.011.30138`	No fix yet

Description

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

References

securityfocus.com/bid/108320 · Third Party Advisory
helpx.adobe.com/security/products/acrobat/apsb19-18.html · Patch

More vulnerabilities in acrobat dc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

acrobat dc

adobe

≥ 15.006.30060, ≤ 15.006.30495≥ 15.008.20082, ≤ 19.010.20100≥ 17.011.30056, ≤ 17.011.30140

No fix yet

acrobat reader dc

adobe

≥ 15.006.30060, ≤ 15.006.30493≥ 15.008.20082, ≤ 19.010.20099≥ 17.011.30059, ≤ 17.011.30138

No fix yet

Description

More vulnerabilities in acrobat dc

See all →