CVE-2018-16042
MEDIUM EPSS 99.6%
Published Jan 18, 20197y ago · Modified Jun 17, 20262w ago
6.5 CVSS 3.1
Published Jan 18, 2019 7y ago
Last Modified Jun 17, 2026 2w ago
Description
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability None
Threat Intelligence
EPSS Exploit Probability
99.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-347
Affected Products 32
| Vendor | Product | Version | Range |
|---|---|---|---|
| adobe | acrobat_dc | * | ≥15.006.30060 – ≤15.006.30457 |
| adobe | acrobat_dc | * | ≥15.008.20082 – ≤19.008.20081 |
| adobe | acrobat_dc | * | ≥17.011.30056 – ≤17.011.30106 |
| adobe | acrobat_reader_dc | * | ≥15.006.30060 – ≤15.006.30457 |
| adobe | acrobat_reader_dc | * | ≥15.008.20082 – ≤19.008.20081 |
| adobe | acrobat_reader_dc | * | ≥17.011.30059 – ≤17.011.30106 |
| adobe | reader | 11.0.10 | any |
| adobe | reader | 11.0.23 | any |
| iskysoft | pdf_editor_6 | 6.4.2.3521 | any |
| iskysoft | pdfelement6 | 6.8.0.3523 | any |
| iskysoft | pdfelement6 | 6.8.4.3921 | any |
| microsoft | windows | * | any |
| adobe | acrobat_dc | * | ≥15.006.30060 – ≤15.006.30456 |
| adobe | acrobat_dc | * | ≥15.008.20082 – ≤19.008.20080 |
| adobe | acrobat_dc | * | ≥17.011.30056 – ≤17.011.30105 |
| adobe | acrobat_reader_dc | * | ≥15.006.30060 – ≤15.006.30456 |
| adobe | acrobat_reader_dc | * | ≥15.008.20082 – ≤19.008.20080 |
| adobe | acrobat_reader_dc | * | ≥17.011.30059 – ≤17.011.30105 |
| adobe | reader | 11.0.10 | any |
| adobe | reader | 11.0.23 | any |
| iskysoft | pdf_editor_6 | 6.6.2.3315 | any |
| iskysoft | pdf_editor_6 | 6.7.6.3399 | any |
| iskysoft | pdfelement6 | 6.7.1.3355 | any |
| iskysoft | pdfelement6 | 6.7.6.3399 | any |
| apple | mac_os_x | * | any |
| adobe | acrobat_dc | * | ≥15.006.30060 – ≤15.006.30456 |
| adobe | acrobat_dc | * | ≥15.008.20082 – ≤19.008.20080 |
| adobe | acrobat_dc | * | ≥17.011.30056 – ≤17.011.30105 |
| adobe | acrobat_reader_dc | * | ≥15.006.30060 – ≤15.006.30456 |
| adobe | acrobat_reader_dc | * | ≥15.008.20082 – ≤19.008.20080 |
| adobe | acrobat_reader_dc | * | ≥17.011.30059 – ≤17.011.30105 |
| linux | linux_kernel | * | any |
References 5
- securityfocus.com http://www.securityfocus.com/bid/106159
- helpx.adobe.com https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
- pdf-insecurity.org https://pdf-insecurity.org/signature/evaluation_2018.html
- pdf-insecurity.org https://pdf-insecurity.org/signature/signature.html
- pdfa.org https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
Remediation
- helpx.adobe.com https://helpx.adobe.com/security/products/acrobat/apsb18-41.html