9.3
CVSSv2

CVE-2017-16390

Published: 09/12/2017 Updated: 15/12/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

An issue exists in Adobe Acrobat and Reader: 2017.012.20098 and previous versions versions, 2017.011.30066 and previous versions versions, 2015.006.30355 and previous versions versions, and 11.0.22 and previous versions versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine API. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe acrobat reader dc

adobe acrobat dc

adobe acrobat

adobe acrobat reader