CVE-2019-8048

EPSS 35.4%

Vexday Risk Score

35Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 35.4%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

15 Aug 2019Public PoC

20 Aug 2019Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected products

Adobe · Adobe Acrobat and Reader

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/47273unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://helpx.adobe.com/security/products/acrobat/apsb19-41.html