CVE-2018-12820
UnknownEPSS 3.97%
Last modified
CVE-2018-12820 is a vulnerability of currently unknown severity. Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.. EPSS estimates a 3.97% chance of exploitation in the next 30 days.
Description
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Digital Editions | <= 4.5.8 |
References
- http://www.securityfocus.com/bid/105532Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/Digital-Editions/apsb18-27.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/105532Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/Digital-Editions/apsb18-27.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12820?
Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure.
How severe is CVE-2018-12820?
Severity scoring for CVE-2018-12820 is pending analysis. The EPSS model estimates a 3.97% probability of exploitation in the next 30 days.
How do I fix CVE-2018-12820?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12815Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.01…
- CVE-2018-12816Adobe Digital Editions versions 4.5.8 and below have an out …
- CVE-2018-12817Adobe Digital Editions versions 4.5.9 and below have an out …
- CVE-2018-12818Adobe Digital Editions versions 4.5.8 and below have an out …
- CVE-2018-12819Adobe Digital Editions versions 4.5.8 and below have an out …
- CVE-2018-1282This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2…
- CVE-2018-12821Adobe Digital Editions versions 4.5.8 and below have an out …
- CVE-2018-12822Adobe Digital Editions versions 4.5.8 and below have an use …
- CVE-2018-12823Adobe Digital Editions versions 4.5.8 and below have a heap …
- CVE-2018-12824Adobe Flash Player 30.0.0.134 and earlier have an out-of-bou…
- CVE-2018-12825Adobe Flash Player 30.0.0.134 and earlier have a security by…
- CVE-2018-12826Adobe Flash Player 30.0.0.134 and earlier have an out-of-bou…
Are you affected by CVE-2018-12820?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST