Vulnerability Spotlight: Adobe Acrobat Reader DC text field remote code execution vulnerability

Summary: Aleksandar Nikolic of Cisco Talos discovered a vulnerability in Adobe Acrobat Reader DC that allows remote code execution when an attacker tricks a user into opening a specially crafted PDF containing two specific lines of JavaScript, triggering an incorrect integer size promotion that leads to heap corruption. Talos confirmed Adobe Acrobat Reader DC 2019.8.20071 is impacted, worked with Adobe to resolve the issue and make an update available, and released Snort rules 48293 and 48294 to detect exploitation attempts.
What you should know: The attack path is a PDF with two lines of JavaScript, and heap corruption from an integer size promotion is enough to let an attacker run arbitrary code on the victim's machine - so a document format your users open all day is the delivery vehicle.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-19716
Related: Vulnerability Spotlight: Adobe Acrobat Reader remote code execution Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026