CVE-2019-8237

9.8 criticalEPSS 2.8%

Critical (9.8) in adobe. EPSS 2.8% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an insufficiently robust encryption vulnerability. Successful exploitation could lead to security feature bypass.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2019-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

https://helpx.adobe.com/security/products/acrobat/apsb19-41.html
https://helpx.adobe.com/security/products/acrobat/apsb19-41.html

Check your stack JSON