CVE-2019-16444
Critical
Description
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful exploitation could lead to privilege escalation.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Adobe Acrobat Dc
PublishedDec 19, 2019
First seenDec 19, 2019
How to fix
Update
- adobe acrobat_dc15.006.30508, 19.021.20058, 17.011.30156 or later
- adobe acrobat_reader_dc15.006.30508, 19.021.20058, 17.011.30156 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe acrobat_dc | 15.006.30060 ≤ v < 15.006.30508, 15.008.20082 ≤ v < 19.021.20058, 17.011.30059 ≤ v < 17.011.30156 | 15.006.30508, 19.021.20058, 17.011.30156 |
| adobe acrobat_reader_dc | 15.006.30060 ≤ v < 15.006.30508, 15.008.20082 ≤ v < 19.021.20058, 17.011.30059 ≤ v < 17.011.30156 | 15.006.30508, 19.021.20058, 17.011.30156 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.