CVE-2018-12799

—

CVSS 3.0

8.8 high

EPSS

7%p94

Published

Aug 29, 2018 (Aug 29, 2018)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Weakness: CWE-476
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.7%)

In the news2 stories

Adobe August 2018 Patch Tuesday addresses 11 vulnerabilities in its products

Security AffairsAug 15, 07:24 UTC · Aug 15, 2018Vulnerability CVE-2018-12824 CVE-2018-12825 CVE-2018-12826+4 CVEs

Adobe releases important security patches for its 4 popular software

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2018Vulnerability in the wildCVE-2018-12808 CVE-2018-12799 CVE-2018-5003