First published: Fri Oct 12 2018(Updated: )
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat | >=15.006.30060<=15.006.30452 | |
Adobe Acrobat | >=15.008.20082<=18.011.20063 | |
Adobe Acrobat | >=17.011.30059<=17.011.30102 | |
Adobe Acrobat Reader | >=15.006.30060<=15.006.30452 | |
Adobe Acrobat Reader | >=15.008.20082<=18.011.20063 | |
Adobe Acrobat Reader | >=17.011.30059<=17.011.30102 | |
Apple iOS and macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-12880 is classified as a critical vulnerability due to its potential for information disclosure.
To mitigate CVE-2018-12880, upgrade your Adobe Acrobat or Reader to the latest versions as specified by Adobe.
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier are affected by CVE-2018-12880.
Using affected versions of Adobe software poses a risk of information disclosure, so it is recommended to update to an unaffected version.
CVE-2018-12880 is an out-of-bounds read vulnerability that can allow attackers to access sensitive information.