Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Adobe Acrobat/Reader could execute malicious code

CVE-2019-16453 · published 6 years ago
Summary

Certain older versions of Adobe Acrobat and Adobe Reader can be tricked into running unwanted programs. This could let an attacker take control of a computer. Update to the latest version of Acrobat DC or Reader DC to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe acrobat_dc >= 15.006.30060, < 15.006.30508
>= 15.008.20082, < 19.021.20058
>= 17.011.30059, < 17.011.30156
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
adobe acrobat_reader_dc >= 15.006.30060, < 15.006.30508
>= 15.008.20082, < 19.021.20058
>= 17.011.30059, < 17.011.30156
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
Original advisory text
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a sec...
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
6% chance of attack within 30 days
Timeline
Published19 Dec 2019
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-16453 · NVD
Track software like this
Free during beta