CVE-2018-4993

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
adobeacrobat_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
adobeacrobat_reader_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_reader_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
𝑥
= Vulnerable software versions