CVE-2019-7089: Adobe Acrobat and Reader data leakage information disclosure

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

high priorityCVSS 7.5 with high confidentiality impact and a very high EPSS percentile, though no KEV listing or known exploit is documented.

What it is

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier contain a sensitive data leakage vulnerability. Successful exploitation leads to information disclosure. The record gives no root-cause detail beyond the CWE being unspecified, so the exact mechanism is unknown.

Impact

An attacker could obtain sensitive information exposed by the affected application. The CVSS vector rates confidentiality impact as high with no integrity or availability impact.

Attack surface

The vector is network-reachable with no privileges and no user interaction required, so exploitation does not depend on authentication or a victim opening a file. The description does not specify the exact interface or protocol used.

Exploitation

The CVE is not listed in CISA KEV and no public exploit or ransomware usage is documented in the record. EPSS gives a 30-day exploitation probability of 0.44778, at the 98.7th percentile, indicating elevated predicted activity.

What to do

• Apply the Adobe security update for APSB19-07 to move Acrobat and Reader to a fixed version.
• Upgrade any installations still on the 2015 or 2017 tracks to a supported release.
• Inventory endpoints for Acrobat and Reader versions at or below 2019.010.20069, 2017.011.30113, and 2015.006.30464.
• Restrict network exposure of PDF-handling services and monitor outbound traffic from hosts running unpatched Reader.

Detection

• Search asset inventories and endpoint telemetry for Acrobat and Reader builds at or below the affected version thresholds.
• Monitor for unexpected outbound connections or data transfers originating from Acrobat or Reader processes.
• Review application crash and error logs from Acrobat and Reader for anomalies consistent with data leakage attempts.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.