CVE-2018-12799

8.8 highEPSS 6.7%

High (8.8) in adobe. EPSS 6.7% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2018-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

http://www.securityfocus.com/bid/105069
http://www.securitytracker.com/id/1041471
https://helpx.adobe.com/security/products/acrobat/apsb18-29.html
http://www.securityfocus.com/bid/105069
http://www.securitytracker.com/id/1041471

Check your stack JSON