First published: Fri Jan 18 2019(Updated: )
Adobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017.011.30110 and earlier version, and 2015.006.30461 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat DC | >=15.006.30060<=15.006.30461 | |
Adobe Acrobat DC | >=15.008.20082<=19.010.20064 | |
Adobe Acrobat DC | >=17.011.30056<=17.011.30110 | |
Adobe Acrobat DC | >=15.006.30060<=15.006.30461 | |
Adobe Acrobat DC | >=15.008.20082<=19.010.20064 | |
Adobe Acrobat DC | >=17.011.30059<=17.011.30110 | |
macOS Yosemite | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-16018 has a critical severity rating due to its potential for privilege escalation.
To remediate CVE-2018-16018, upgrade Adobe Acrobat and Reader to the latest version available.
CVE-2018-16018 affects Adobe Acrobat and Reader versions 2015.006.30461 and earlier, 2017.011.30110 and earlier, and 2019.010.20064 and earlier.
Yes, CVE-2018-16018 can be exploited remotely if an attacker can convince a user to open a malicious file.
CVE-2018-16018 can facilitate attacks that may lead to unauthorized privilege escalation on vulnerable systems.