CVE-2019-7025 is a critical use-after-free vulnerability affecting Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier, impacting systems running Adobe, Apple, and Microsoft products. With a CVSS score of 9.8, it presents a severe risk, as successful exploitation could lead to arbitrary code execution without requiring user interaction. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and there is no evidence of active exploitation or significant community discussion, the high FAUCET Risk Score of 84/100 indicates its potential for severe impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15.006.30060, < 15.006.30475CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 15.008.20082, < 19.010.20091CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 17.011.30056, < 17.011.30120CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 15.006.30060, < 15.006.30475CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* | ||
>= 15.008.20082, < 19.010.20091CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.