VULNERABILITY INTELLIGENCE
CVE-2017-11308
CVSS score9.8 CRITICAL
EPSS probability7.96%
CISA KEVNot currently listed
Published2018-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- psirt@adobe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory