Back

CVE-2019-8048

CRITICAL

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Aug 20, 2019 Modified: Jun 17, 2026
CWE-119

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (6)

Vendor Product Version
adobe acrobat_dc * ≥ 15.006.30060 < 15.006.30499
adobe acrobat_dc * ≥ 15.008.20082 < 19.012.20036
adobe acrobat_dc * ≥ 17.011.30059 < 17.011.30144
adobe acrobat_reader_dc * ≥ 15.006.30060 < 15.006.30499
adobe acrobat_reader_dc * ≥ 15.008.20082 < 19.012.20036
adobe acrobat_reader_dc * ≥ 17.011.30059 < 17.011.30144

GitHub Security Advisory GHSA-v4j4-6q7q-jhmq

Adobe Acrobat and Reader versions, 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 34.56%

Top 2% most likely to be exploited

Threat Score 49.6 / 100

Data Sources

NVD EPSS GitHub