Back

CVE-2019-8016

CRITICAL

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Aug 20, 2019 Modified: Jun 17, 2026
CWE-787

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (6)

Vendor Product Version
adobe acrobat_dc * ≥ 15.006.30060 < 15.006.30499
adobe acrobat_dc * ≥ 15.008.20082 < 19.012.20036
adobe acrobat_dc * ≥ 17.011.30059 < 17.011.30144
adobe acrobat_reader_dc * ≥ 15.006.30060 < 15.006.30499
adobe acrobat_reader_dc * ≥ 15.008.20082 < 19.012.20036
adobe acrobat_reader_dc * ≥ 17.011.30059 < 17.011.30144

GitHub Security Advisory GHSA-cj4v-392w-whrg

Adobe Acrobat and Reader versions, 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 22.03%

Top 3% most likely to be exploited

Threat Score 45.8 / 100

Data Sources

NVD EPSS GitHub