Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Note: A different vulnerability than CVE-2018-19723.

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30452, 2017.011.30102, or 2018.011.20063. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead     to arbitrary code execution. (CVE-2018-12848)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. (CVE-2018-12775, CVE-2018-12778, CVE-2018-12801, CVE-2018-12840, CVE-2018-12849,     CVE-2018-12850)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19723. (CVE-2018-19721)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19721. (CVE-2018-19723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30452, 2017.011.30102, or 2018.011.20063. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead     to arbitrary code execution. (CVE-2018-12848)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. (CVE-2018-12775, CVE-2018-12778, CVE-2018-12801, CVE-2018-12840, CVE-2018-12849,     CVE-2018-12850)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19723. (CVE-2018-19721)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19721. (CVE-2018-19723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30452, 2017.011.30102, or 2018.011.20063. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead     to arbitrary code execution. (CVE-2018-12848)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. (CVE-2018-12775, CVE-2018-12778, CVE-2018-12801, CVE-2018-12840, CVE-2018-12849,     CVE-2018-12850)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19723. (CVE-2018-19721)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19721. (CVE-2018-19723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30452, 2017.011.30102, or 2018.011.20063. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead     to arbitrary code execution. (CVE-2018-12848)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. (CVE-2018-12775, CVE-2018-12778, CVE-2018-12801, CVE-2018-12840, CVE-2018-12849,     CVE-2018-12850)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19723. (CVE-2018-19721)

  - Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and     2015.006.30448 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to     information disclosure. Note: A different vulnerability than CVE-2018-19721. (CVE-2018-19723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207088	Adobe Reader < 2015.006.30452 / 2017.011.30102 / 2018.011.20063 Multiple Vulnerabilities (APSB18-34) (macOS)	Nessus	MacOS X Local Security Checks	critical
207078	Adobe Acrobat < 2015.006.30452 / 2017.011.30102 / 2018.011.20063 Multiple Vulnerabilities (APSB18-34) (macOS)	Nessus	MacOS X Local Security Checks	critical
117600	Adobe Reader < 2015.006.30452 / 2017.011.30102 / 2018.011.20063 Multiple Vulnerabilities (APSB18-34)	Nessus	Windows	critical
117599	Adobe Acrobat < 2015.006.30452 / 2017.011.30102 / 2018.011.20063 Multiple Vulnerabilities (APSB18-34)	Nessus	Windows	critical

Detections

Analytics

CVE-2018-19721

medium

Tenable Plugins

critical

critical

critical

critical