9.8crit
CVE-2018-4987in critical feed
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
13.3%
percentile 96%
Public exploits
0
none known
Summary
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Exploit prediction (EPSS)
13.32% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- n/a Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions
Classification
- Weakness
- CWE-476 NULL Pointer Dereference
References
- securityfocus.com /bid/104173 · vdb-entry, x_refsource_BID, x_transferred
- helpx.adobe.com /security/products/acrobat/apsb18-09.html · x_refsource_MISC, x_transferred
- securitytracker.com /id/1040920 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2018-4987
- NVD: CVE-2018-4987
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.