CVE-2018-4917

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
adobeacrobat_2017
17.011.30070 ≤
𝑥
< 17.011.30078
adobeacrobat_dc
15.006.30394 ≤
𝑥
< 15.006.30413
adobeacrobat_dc
18.009.20050 ≤
𝑥
< 18.011.20035
adobeacrobat_reader_2017
17.011.30070 ≤
𝑥
< 17.011.30078
adobeacrobat_reader_dc
15.006.30394 ≤
𝑥
< 15.006.30413
adobeacrobat_reader_dc
18.009.20050 ≤
𝑥
< 18.011.20035
𝑥
= Vulnerable software versions