CVE-2018-12791

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability

published July 20, 2018

CVSS
โ€”
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

๐Ÿšจ A crafty use-after-free vulnerability is lurking in Adobe Acrobat and Reader! If exploited, it could let attackers execute arbitrary code in your context. ๐Ÿ”ฅ Think of it like a restaurant that forgets to take a used table out of service. A waiter could accidentally seat a new customer at that table, and the previous occupant's leftovers could lead to an unexpected and messy situation! If an attacker successfully exploits this vulnerability, they could run any code they choose under your user account, which might lead to data breaches or malicious actions without your knowledge. Imagine someone stepping into your shoes and doing whatever they please!

Put simply

Think of it like a restaurant that forgets to take a used table out of service. A waiter could accidentally seat a new customer at that table, and the previous occupant's leftovers could lead to an unexpected and messy situation! This use-after-free vulnerability arises when the application continues to use a freed memory space, allowing attackers to manipulate that memory and execute arbitrary code within the context of the user currently logged in.

What to do

If an attacker successfully exploits this vulnerability, they could run any code they choose under your user account, which might lead to data breaches or malicious actions without your knowledge. Imagine someone stepping into your shoes and doing whatever they please! To protect yourself, update Adobe Acrobat and Reader immediately to the latest versions. Ensure your software is on 2018.011.20041 or later, 2017.011.30081 or later, or 2015.006.30419 or later. Regular updates are essential for security! You've got this! By staying updated and vigilant, you'll keep your digital life secure! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08594 ยท 95.1th percentile
Published
2018-07-20T19:00Z
EPSS history
Timeline
  • 20 JUL 19:00Z
    Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability
    cvelistv5