Back

CVE-2019-16450

CRITICAL

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Dec 19, 2019 Modified: Jun 17, 2026
CWE-787

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (6)

Vendor Product Version
adobe acrobat_dc * ≥ 15.006.30060 < 15.006.30508
adobe acrobat_dc * ≥ 15.008.20082 < 19.021.20058
adobe acrobat_dc * ≥ 17.011.30059 < 17.011.30156
adobe acrobat_reader_dc * ≥ 15.006.30060 < 15.006.30508
adobe acrobat_reader_dc * ≥ 15.008.20082 < 19.021.20058
adobe acrobat_reader_dc * ≥ 17.011.30059 < 17.011.30156

GitHub Security Advisory GHSA-fm92-xv25-gf69

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 4.32%

Top 10% most likely to be exploited

Threat Score 40.5 / 100

Data Sources

NVD EPSS GitHub