CVE-2018-4987

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
adobeacrobat_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
adobeacrobat_reader_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_reader_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
𝑥
= Vulnerable software versions