Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat_dc | Adobe | 15.006.30060 (including) | 15.006.30464 (including) |
| Acrobat_dc | Adobe | 15.008.20082 (including) | 19.010.20069 (including) |
| Acrobat_dc | Adobe | 17.011.30056 (including) | 17.011.30113 (including) |
| Acrobat_reader_dc | Adobe | 15.006.30060 (including) | 15.006.30464 (including) |
| Acrobat_reader_dc | Adobe | 15.008.20082 (including) | 19.010.20069 (including) |
| Acrobat_reader_dc | Adobe | 17.011.30059 (including) | 17.011.30113 (including) |