CVE-2019-7069

UnknownEPSS 4.51%

Last modified

CVE-2019-7069 is a vulnerability of currently unknown severity. Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .. EPSS estimates a 4.51% chance of exploitation in the next 30 days.

Description

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Metrics

EPSS Probability
4.51%

90.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AdobeAcrobat Dc>= 15.006.30060, < 15.006.30475
AdobeAcrobat Dc>= 15.008.20082, < 19.010.20091
AdobeAcrobat Dc>= 17.011.30059, < 17.011.30120
AdobeAcrobat Reader Dc>= 15.006.30060, < 15.006.30475
AdobeAcrobat Reader Dc>= 15.008.20082, < 19.010.20091
AdobeAcrobat Reader Dc>= 17.011.30059, < 17.011.30120

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-7069?
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .
How severe is CVE-2019-7069?
Severity scoring for CVE-2019-7069 is pending analysis. The EPSS model estimates a 4.51% probability of exploitation in the next 30 days.
How do I fix CVE-2019-7069?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-7069?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST