CVE-2018-19708: Use After Free
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19708?
CVE-2018-19708 has a severity rating of critical due to its potential for remote code execution.
How do I fix CVE-2018-19708?
To fix CVE-2018-19708, users should update Adobe Acrobat or Reader to the latest version provided by Adobe.
Which versions of Adobe Acrobat and Reader are affected by CVE-2018-19708?
CVE-2018-19708 affects Adobe Acrobat and Reader versions prior to 2019.008.20081, 2017.011.30106, and 2015.006.30457.
Could CVE-2018-19708 allow an attacker to execute arbitrary code?
Yes, CVE-2018-19708 allows an attacker to execute arbitrary code on the affected system.
What should I do if I cannot update Adobe Acrobat or Reader due to CVE-2018-19708?
If you cannot update Adobe Acrobat or Reader, consider reviewing and applying security best practices or using alternative PDF software until an update is applied.