← Back

CVE-2019-8252

nvd nist
Published: Jul 6, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.

Affected (12)

Adobe
2 products
Acrobat Dc
Acrobat Reader Dc
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat Dc
15.006.30060 ≤ version ≤ 15.006.30498
Acrobat Dc
17.011.30059 ≤ version ≤ 17.011.30143
Acrobat Dc
15.008.20082 ≤ version ≤ 19.012.20035
Adobe
Acrobat Reader Dc
15.006.30060 ≤ version ≤ 15.006.30498
Acrobat Reader Dc
17.011.30059 ≤ version ≤ 17.011.30143
Acrobat Reader Dc
15.008.20082 ≤ version ≤ 19.012.20035
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat Dc
15.006.30060 ≤ version ≤ 15.006.30497
Acrobat Dc
17.011.30059 ≤ version ≤ 17.011.30142
Acrobat Dc
15.008.20082 ≤ version ≤ 19.012.20034
Adobe
Acrobat Reader Dc
15.006.30060 ≤ version ≤ 15.006.30497
Acrobat Reader Dc
17.011.30059 ≤ version ≤ 17.011.30142
Acrobat Reader Dc
15.008.20082 ≤ version ≤ 19.012.20034
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

References (2)

Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.