VULNERABILITY INTELLIGENCE

CVE-2018-4987

CVSS score9.8 CRITICAL

EPSS probability13.32%

CISA KEVNot currently listed

Published2018-07-09

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Weakness classification

CWE-476: NULL Pointer Dereference

Primary references

psirt@adobe.com — Third Party Advisory, VDB Entry
psirt@adobe.com — Third Party Advisory, VDB Entry
psirt@adobe.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory