Back

CVE-2019-8200

CRITICAL

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Oct 17, 2019 Modified: Jun 17, 2026
CWE-843

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (6)

Vendor Product Version
adobe acrobat_dc * ≥ 15.006.30060 < 15.006.30504
adobe acrobat_dc * ≥ 15.008.20082 < 19.021.20047
adobe acrobat_dc * ≥ 17.011.30059 < 17.011.30150
adobe acrobat_reader_dc * ≥ 15.006.30060 < 15.006.30504
adobe acrobat_reader_dc * ≥ 15.008.20082 < 19.021.20047
adobe acrobat_reader_dc * ≥ 17.011.30059 < 17.011.30150

GitHub Security Advisory GHSA-x6rf-cwj5-2f8q

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 4.43%

Top 9% most likely to be exploited

Threat Score 40.5 / 100

Data Sources

NVD EPSS GitHub