CVE-2018-16011: Use After Free

Q: What is the severity of CVE-2018-16011?

CVE-2018-16011 is considered a critical vulnerability due to the potential for arbitrary code execution.

Q: How do I fix CVE-2018-16011?

To fix CVE-2018-16011, update Adobe Acrobat and Reader to the latest versions that are not affected by this vulnerability.

Q: Which versions of Adobe Acrobat are affected by CVE-2018-16011?

CVE-2018-16011 affects Adobe Acrobat and Reader versions up to 2019.010.20064, 2017.011.30110, and 2015.006.30461.

Q: What types of attacks can exploit CVE-2018-16011?

CVE-2018-16011 can be exploited to execute arbitrary code on the affected systems, potentially allowing attackers to take control.

Q: Is CVE-2018-16011 present in macOS Yosemite?

CVE-2018-16011 does not affect macOS Yosemite, as it is not listed as vulnerable.

Published Jan 18, 2019

Updated

Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<=15.006.30461

Adobe Acrobat DC>=15.008.20082<=19.010.20064

Adobe Acrobat DC>=17.011.30056<=17.011.30110

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30461

Adobe Acrobat Reader DC>=15.008.20082<=19.010.20064

Adobe Acrobat Reader DC>=17.011.30059<=17.011.30110

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb19-02.html

Event History

Jan 18, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-16011?

CVE-2018-16011 is considered a critical vulnerability due to the potential for arbitrary code execution.

How do I fix CVE-2018-16011?