CVE-2018-16042
Estado: ModificadaMedia (6.5)—
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 82%
- Percentil entre todas las CVEs puntuadas: 100
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-347
Referencias
- http://www.securityfocus.com/bid/106159
- https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
- https://pdf-insecurity.org/signature/evaluation_2018.html
- https://pdf-insecurity.org/signature/signature.html
- https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
- http://www.securityfocus.com/bid/106159
- https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
- https://pdf-insecurity.org/signature/evaluation_2018.html
- https://pdf-insecurity.org/signature/signature.html
- https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-16042",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2019-01-18T17:29:31.230",
"references": [
{
"url": "http://www.securityfocus.com/bid/106159",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@adobe.com"
},
{
"url": "https://helpx.adobe.com/security/products/acrobat/apsb18-41.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://pdf-insecurity.org/signature/evaluation_2018.html",
"tags": [
"Third Party Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://pdf-insecurity.org/signature/signature.html",
"tags": [
"Third Party Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/",
"tags": [
"Third Party Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/bid/106159",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://helpx.adobe.com/security/products/acrobat/apsb18-41.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://pdf-insecurity.org/signature/evaluation_2018.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://pdf-insecurity.org/signature/signature.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-347"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure."
},
{
"lang": "es",
"value": "Adobe Acrobat y Adobe Reader, en las versiones 2019.008.20081 y anteriores, en las 2019.008.20080 y anteriores, en las 2019.008.20081 y anteriores, en las 2017.011.30106 y anteriores, en las 2017.011.30105 y anteriores, en las 2015.006.30457 y anteriores y en las 2015.006.30456 y anteriores, podrían tener una vulnerabilidad omisión de seguridad. Su explotación con éxito podría resultar en una divulgación de información."
}
],
"lastModified": "2026-06-17T01:43:35.323",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F01FAB9E-7F95-4BD5-B524-F008637A1DCF",
"versionEndIncluding": "15.006.30457",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C9E9FC0-F0D7-4EA8-B232-FC8832AB51CD",
"versionEndIncluding": "19.008.20081",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E07B1BA-D23B-4AF8-88DA-E7C676F2FE17",
"versionEndIncluding": "17.011.30106",
"versionStartIncluding": "17.011.30056"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16FBD87F-B4BC-4EE1-8833-11E16142E3A3",
"versionEndIncluding": "15.006.30457",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "205830D0-E93E-45A6-9EC6-FCB93D4EF951",
"versionEndIncluding": "19.008.20081",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84DE8099-EC97-4F4B-B672-7ECBFFB4EA83",
"versionEndIncluding": "17.011.30106",
"versionStartIncluding": "17.011.30059"
},
{
"criteria": "cpe:2.3:a:adobe:reader:11.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FFA3D5B-0464-4A5B-AF66-BFE2A1B0A57F"
},
{
"criteria": "cpe:2.3:a:adobe:reader:11.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C2FC6AA-CD20-4331-8347-5CD38DDA63E4"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.4.2.3521:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9796785E-F5A4-4EB9-AE4C-3296449F0A27"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.8.0.3523:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6FE27B0-5187-441A-8824-211838C71F3D"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.8.4.3921:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "950C35B2-1B7F-495F-9947-0E992329954B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FB180E5-8772-4EE7-8A0D-3A1BC4BD5C02",
"versionEndIncluding": "15.006.30456",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A540D30-F192-41B2-A37E-D85A21363132",
"versionEndIncluding": "19.008.20080",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3BE78D3-D0A2-425E-835C-9E095231958E",
"versionEndIncluding": "17.011.30105",
"versionStartIncluding": "17.011.30056"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F292064-4175-485C-8D52-FD7DCC3E9D07",
"versionEndIncluding": "15.006.30456",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17CD35B3-5C4B-486E-AAF0-23E6487C45DE",
"versionEndIncluding": "19.008.20080",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "524B36D5-26A7-4069-9786-B72120FB7309",
"versionEndIncluding": "17.011.30105",
"versionStartIncluding": "17.011.30059"
},
{
"criteria": "cpe:2.3:a:adobe:reader:11.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FFA3D5B-0464-4A5B-AF66-BFE2A1B0A57F"
},
{
"criteria": "cpe:2.3:a:adobe:reader:11.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C2FC6AA-CD20-4331-8347-5CD38DDA63E4"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.6.2.3315:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80241CB1-3BC7-4572-92A4-E348C50FAE9A"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdf_editor_6:6.7.6.3399:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8336F6DF-0677-4AED-B062-0E7957A7A293"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.7.1.3355:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D3941F4-B294-4E22-A6FF-CF3085DF6C89"
},
{
"criteria": "cpe:2.3:a:iskysoft:pdfelement6:6.7.6.3399:*:*:*:professional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A3DB79B-12A7-4E55-9499-36EED6688382"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FB180E5-8772-4EE7-8A0D-3A1BC4BD5C02",
"versionEndIncluding": "15.006.30456",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A540D30-F192-41B2-A37E-D85A21363132",
"versionEndIncluding": "19.008.20080",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3BE78D3-D0A2-425E-835C-9E095231958E",
"versionEndIncluding": "17.011.30105",
"versionStartIncluding": "17.011.30056"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F292064-4175-485C-8D52-FD7DCC3E9D07",
"versionEndIncluding": "15.006.30456",
"versionStartIncluding": "15.006.30060"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17CD35B3-5C4B-486E-AAF0-23E6487C45DE",
"versionEndIncluding": "19.008.20080",
"versionStartIncluding": "15.008.20082"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "524B36D5-26A7-4069-9786-B72120FB7309",
"versionEndIncluding": "17.011.30105",
"versionStartIncluding": "17.011.30059"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@adobe.com"
}