Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-0655

82
FAUCET Score

CVE-2008-0655 describes multiple unspecified vulnerabilities in Adobe Reader and Acrobat versions prior to 8.1.2. This critical vulnerability (CVSS 9.8) has an unknown attack vector and impact, but it poses a severe risk of compromise to confidentiality, integrity, and availability. It is actively exploited in the wild, as indicated by its presence in the KEV catalog and a high EPSS score, despite a lack of public exploit code or Metasploit modules. The vulnerability has garnered significant community discussion and media coverage, highlighting its importance.

Impacted Technologies

VendorProductVersion(s)CPE
< 8.1.2CPE matchmatch criteria
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
< 8.1.2CPE matchmatch criteria
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
36.84%
Probability of exploitation in next 30 days
EPSS Percentile
98.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Added to KEV · Jun 8, 2022
This CVE's current EPSS score of 0.3684 is in the 97th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Extras for RHEL 3Fixed in: acroread-0:8.1.2-1.el3.6
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: acroread-0:8.1.2-1.el4.2
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: acroread-0:8.1.2-1.el5.3
View patch
adobevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2008-0655Critical

acroread: unspecified vulnerabilities

Feb 6, 2008

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
blogs.adobe.com / acroread/2008/02/adobe_reader_812_for_linux_and.html
Broken Link
kb.adobe.com / selfservice/viewContent.do
Vendor Advisory
lists.opensuse.org / opensuse-security-announce/2008-02/msg00007.html
Broken Link
secunia.com / advisories/28802
Broken LinkPatchVendor Advisory
secunia.com / advisories/28851
Broken LinkVendor Advisory
secunia.com / advisories/28983
Broken LinkVendor Advisory
secunia.com / advisories/29065
Broken LinkVendor Advisory
secunia.com / advisories/29205
Broken LinkVendor Advisory
secunia.com / advisories/30840
Broken LinkVendor Advisory
security.gentoo.org / glsa/glsa-200803-01.xml
Third Party Advisory
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10299
Broken Link
sunsolve.sun.com / search/document.do
Broken Link
adobe.com / support/security/advisories/apsa08-01.html
Vendor Advisory
adobe.com / support/security/bulletins/apsb08-13.html
Vendor Advisory
redhat.com / support/errata/RHSA-2008-0144.html
Broken Link
securityfocus.com / bid/27641
Broken LinkExploitPatchThird Party AdvisoryVDB Entry
us-cert.gov / cas/techalerts/TA08-043A.html
Broken LinkThird Party AdvisoryUS Government Resource
vupen.com / english/advisories/2008/0425
Broken Link
vupen.com / english/advisories/2008/1966/references
Broken LinkVendor Advisory