CVE-2018-4993

EUVD-2018-16778
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
adobeacrobat_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
adobeacrobat_reader_dc
15.006.30060 ≤
𝑥
≤ 15.006.30417
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
≤ 18.011.20038
adobeacrobat_reader_dc
17.011.30059 ≤
𝑥
≤ 17.011.30079
𝑥
= Vulnerable software versions