High severity7.5NVD Advisory· Published Nov 29, 2018· Updated Jun 17, 2026
CVE-2018-15979
CVE-2018-15979
Description
Adobe Acrobat and Reader versions 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
Affected products
7cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*+ 3 more
- cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*range: >=15.006.30060,<=15.006.30456
- cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<=19.008.20080
- (no CPE)range: <=2019.008.20080, <=2017.011.30105, <=2015.006.30456
- (no CPE)range: 2019.008.20080 and earlier, 2017.011.30105 and earlier, and 2015.006.30456 and earlier versions
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*+ 1 more
- cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*range: >=15.006.30060,<=15.006.30456
- cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<=19.008.20080
- Range: <=2019.008.20080, <=2017.011.30105, <=2015.006.30456
Patches
Vulnerability mechanics
References
3- helpx.adobe.com/security/products/acrobat/apsb18-40.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/105907nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1042099nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.