CVE-2018-12808

CRITICAL EXPLOITED RANSOMWARE

Adobe Acrobat and Reader <2018.011.20055 - RCE

Title source: llm

Exploitation Summary

CVE-2018-12808 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041471

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105069

Patch, Vendor Advisory x_refsource_confirm

https://helpx.adobe.com/security/products/acrobat/apsb18-29.html

Scores

CVSS v3 9.8

EPSS 0.0751

EPSS Percentile 93.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-10-15

Ransomware Use Confirmed

CWE

CWE-787

Status published

Products (4)

adobe/acrobat_dc 15.006.30060 - 15.006.30434

adobe/acrobat_dc 15.008.20082 - 18.011.20055

adobe/acrobat_reader_dc 15.006.30060 - 15.006.30434

adobe/acrobat_reader_dc 15.008.20082 - 18.011.20055

Published Aug 29, 2018

Tracked Since Feb 18, 2026