CVE-2019-8237

EUVD-2019-17635
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an insufficiently robust encryption vulnerability. Successful exploitation could lead to security feature bypass.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
adobeacrobat_dc
15.006.30060 ≤
𝑥
< 15.006.30499
adobeacrobat_dc
15.008.20082 ≤
𝑥
< 19.012.20036
adobeacrobat_dc
17.011.30059 ≤
𝑥
< 17.011.30144
adobeacrobat_reader_dc
15.006.30060 ≤
𝑥
< 15.006.30499
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
< 19.012.20036
adobeacrobat_reader_dc
17.011.30059 ≤
𝑥
< 17.011.30144
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/acrobat/apsb19-41.html
https://helpx.adobe.com/security/products/acrobat/apsb19-41.html