CVE-2018-4886

CVE-2018-4886 affects Adobe Acrobat Reader and related Flash/EMF processing: the issue is a buffer overread in the image conversion engine when handling Enhanced Metafile Format (EMF) data, specifically with bitmap rectangles. This can cause sensitive data exposure. The affected products are Adob...

CVE-2018-4885

CVE-2018-4885 affects Adobe Acrobat Reader and Reader DC/Pro versions prior to the patched releases, where the EMF processing image conversion engine may read past the end of a buffer. The issue is an out-of-bounds read in EMF parsing that can lead to exposure of sensitive data. Microsoft-style? ...

CVE-2018-4880

CVE-2018-4880 affects Adobe Acrobat Reader/Acrobat versions: 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. Root cause is a computation that reads data past the end of the target buffer within the U3D data parsing in the conversion module; this can lead to...

CVE-2018-4879

The CVE-2018-4879 entry concerns Adobe Acrobat Reader (and related versions) with a vulnerability in the EMF+ image conversion path. The issue arises from a buffer overrun in the module that processes EMF+ data, allowing potential corruption of sensitive data or execution of arbitrary code. Affec...

CVE-2018-4895

CVE-2018-4895 affects Adobe Acrobat Reader (versions including 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) and relates to a buffer overrun in the image conversion engine while processing Enhanced Metafile Format Plus (EMF+) data. The root cause is data bein...

CVE-2018-4896

The CVE-2018-4896 issue affects Adobe Acrobat Reader/Acrobat with EMF+ data handling in the image conversion module. It arises from computing with data past the end of the target buffer, enabling a potential sensitive data exposure. Affected products include Acrobat Reader 2018.009.20050 and earl...

CVE-2018-4889

CVE-2018-4889 affects Adobe Acrobat Reader and relates to an out-of-bounds read during XPS image conversion caused by reading data past the end of a buffer. Affected products include Adobe Acrobat Reader 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The v...

CVE-2018-4887

CVE-2018-4887 affects Adobe Acrobat/Reader (versions 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier). The issue stems from a Unicode mapping EMF data processing path reading past the end of a buffer, enabling potential exposure of sensitive data. Public advisor...

CVE-2018-4910

CVE-2018-4910 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It is a heap overflow in the JavaScript engine triggered by a crafted PDF using JavaScript that manipulates the Optional Content Group (OCG). Successful expl...

CVE-2018-4909

Adobe Acrobat Reader CVE-2018-4909 affects versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The flaw arises from computing on data past the end of a target buffer in the image conversion module when processing JPEG metadata, potentially exposing sen...

CVE-2018-4903

Adobe Acrobat Reader/Adobe Reader (various affected builds listed in CVE-2018-4903) is vulnerable due to a flaw in TIFF data processing within the XPS module where data is read past the end of a target buffer. This out‑of‑bounds read can lead to exposure of sensitive data. The description covers ...

CVE-2018-4901

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the docume...

CVE-2018-4900

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4905

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4902

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the rendering engine. The vulnerability is triggered by a crafted P...

CVE-2018-4912

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4872

Adobe Acrobat Reader (various affected versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a security bypass that enables sandbox escape, due to the way a cross call is handled. The provided documents do not include explicit exploit steps, impact...

CVE-2018-4913

Adobe Acrobat Reader (various affected builds: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a use-after-free vulnerability in the XFA engine triggered by crafted PDF XFA script definitions, related to DOM manipulation. Successful exploitation could ...

CVE-2018-4916

Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...

CVE-2018-4883

The CVE-2018-4883 issue affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It arises from a computation that reads data past the end of the target buffer within the EMF image conversion engine, potentially exposing sensiti...