Medium severity · published Jan 28, 2019
CVE-2018-19728
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and…
6.5
CVSS
3%
EPSS
No
On KEV
Description
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Adobe Acrobat and Reader · Adobe
2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier versions · source: vendor
AD
Acrobat DC · Adobe
15.006.30060 through 15.006.30457; 15.008.20082 through 19.008.20081; 17.011.30056 through 17.011.30106; 15.006.30060 through 15.006.30456; 15.008.20082 through 19.008.20080; 17.011.30056 through 17.011.30105 · source: NVD
AR
Acrobat Reader DC · Adobe
15.006.30060 through 15.006.30457; 15.008.20082 through 19.008.20081; 17.011.30059 through 17.011.30106; 15.006.30060 through 15.006.30456; 15.008.20082 through 19.008.20080; 17.011.30059 through 17.011.30105 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-19728
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-19728
Patch
https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
More from Adobe Acrobat and Reader
7.8
CVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
9.8
CVE-2018-19725
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability