CVE-2018-12785

Think of this as a “memory spill” bug in Acrobat/Reader. If someone sends you a specially made PDF or document, Acrobat/Reader may mishandle it and let that attacker run malicious actions on your computer as the same user you’re currently using. That can lead to malware getting installed or sensitive information being accessed.

This matters if your business runs Adobe Acrobat DC or Adobe Acrobat and Reader versions that are at or before 2018.011.20040, 2017.011.30080, or 2015.006.30418. Because the vulnerability can be triggered through crafted document content, you’re most at risk on machines that regularly open external files (email attachments, downloads from the web, or shared documents). This is primarily a risk when an attacker can get the user to open a malicious file in a vulnerable version; it is not confirmed as widely exploited in the provided findings.

Treat this as urgent for action at the machine level because it’s a critical-severity memory corruption issue and could allow code execution when opening a crafted document. However, the provided findings do not show confirmed exploitation via CISA KEV and do not list public exploit code, so this is not “already everywhere” risk—still, update immediately for any affected Acrobat/Reader installations.