Vulnerability Spotlight: Information leak vulnerability in Adobe Acrobat Reader’s Java Script function

Summary: Cisco Talos discovered an information leak vulnerability in Adobe Acrobat Reader DC version 2019.021.20048, triggered when a user opens a PDF or web page containing specific embedded JavaScript. The attacker could view sensitive information, which could then be used to bypass mitigations when exploiting another vulnerability; Talos worked with Adobe on an update and published Snort rules 52331 and 52332.
What's compelling: The leak is a stepping stone, not the end goal: the information it exposes is meant to help an attacker defeat mitigations in a follow-on exploit, so a single malicious PDF can weaken defenses ahead of the real attack.

Read the original at Cisco Talos ↗

Topics: Cloud Security
Related: Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Cyber Risks ·