CVE-2018-4911

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The...

CVE-2018-4895

CVE-2018-4895 affects Adobe Acrobat Reader (versions including 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) and relates to a buffer overrun in the image conversion engine while processing Enhanced Metafile Format Plus (EMF+) data. The root cause is data bein...

CVE-2018-4896

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4880

CVE-2018-4880 affects Adobe Acrobat Reader/Acrobat versions: 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. Root cause is a computation that reads data past the end of the target buffer within the U3D data parsing in the conversion module; this can lead to...

CVE-2018-4897

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4889

CVE-2018-4889 affects Adobe Acrobat Reader and relates to an out-of-bounds read during XPS image conversion caused by reading data past the end of a buffer. Affected products include Adobe Acrobat Reader 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The v...

CVE-2018-4888

Adobe Acrobat Reader (including DC, and older versions such as 2018.009.20050, 2017.011.30070, 2015.006.30394 and earlier) is affected by CVE-2018-4888 due to a use-after-free in the XFA engine triggered by a crafted PDF file. The issue stems from a dangling reference left when freeing an object ...

CVE-2018-4886

CVE-2018-4886 affects Adobe Acrobat Reader and related Flash/EMF processing: the issue is a buffer overread in the image conversion engine when handling Enhanced Metafile Format (EMF) data, specifically with bitmap rectangles. This can cause sensitive data exposure. The affected products are Adob...

CVE-2018-4872

Adobe Acrobat Reader (various affected versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a security bypass that enables sandbox escape, due to the way a cross call is handled. The provided documents do not include explicit exploit steps, impact...

CVE-2018-4916

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image...

CVE-2018-4916

Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...

CVE-2018-4907

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4913

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is...

CVE-2018-4905

Technical details about CVE-2018-4905 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories for affected products and remediation guidance.

CVE-2018-4890

CVE-2018-4890 affects Adobe Acrobat Reader implementations (2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier). The issue is a heap overflow in the image conversion engine when processing JPEG data embedded in an XPS file. Consequences described include code corru...

CVE-2018-4892

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF...

CVE-2018-4890

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within...

CVE-2018-4883

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the...

CVE-2018-4883

The CVE-2018-4883 issue affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It arises from a computation that reads data past the end of the target buffer within the EMF image conversion engine, potentially exposing sensiti...

CVE-2018-4881

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...