CVE-2019-8237
Critical
Description
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an insufficiently robust encryption vulnerability. Successful exploitation could lead to security feature bypass.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Adobe Acrobat Dc
PublishedOct 23, 2019
First seenOct 23, 2019
How to fix
Update
- adobe acrobat_dc15.006.30499, 19.012.20036, 17.011.30144 or later
- adobe acrobat_reader_dc15.006.30499, 19.012.20036, 17.011.30144 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe acrobat_dc | 15.006.30060 ≤ v < 15.006.30499, 15.008.20082 ≤ v < 19.012.20036, 17.011.30059 ≤ v < 17.011.30144 | 15.006.30499, 19.012.20036, 17.011.30144 |
| adobe acrobat_reader_dc | 15.006.30060 ≤ v < 15.006.30499, 15.008.20082 ≤ v < 19.012.20036, 17.011.30059 ≤ v < 17.011.30144 | 15.006.30499, 19.012.20036, 17.011.30144 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.