CVE-2019-7089

UnknownEPSS 44.50%

Last modified

CVE-2019-7089 is a vulnerability of currently unknown severity. Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.. EPSS estimates a 44.50% chance of exploitation in the next 30 days.

Description

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.

Metrics

EPSS Probability
44.50%

98.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
AdobeAcrobat Dc>= 15.006.30060, < 15.006.30475
AdobeAcrobat Dc>= 15.008.20082, < 19.010.20091
AdobeAcrobat Dc>= 17.011.30059, < 17.011.30120
AdobeAcrobat Reader Dc>= 15.006.30060, < 15.006.30475
AdobeAcrobat Reader Dc>= 15.008.20082, < 19.010.20091
AdobeAcrobat Reader Dc>= 17.011.30059, < 17.011.30120

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-7089?
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a data leakage (sensitive) vulnerability. Successful exploitation could lead to information disclosure.
How severe is CVE-2019-7089?
Severity scoring for CVE-2019-7089 is pending analysis. The EPSS model estimates a 44.50% probability of exploitation in the next 30 days.
How do I fix CVE-2019-7089?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-7089?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST