CVE-2018-4982Out-of-bounds Write in Adobe Acrobat DC

Severity
8.8HIGHNVD
EPSS
4.2%
top 11.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 9
Latest updateMay 13

Description

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

NVDadobe/acrobat_reader_dc15.006.3006015.006.30417+2
NVDadobe/acrobat_dc15.006.3006015.006.30417+2

Patches

🔴Vulnerability Details

1
GHSA
GHSA-mq6c-qgpj-jw78: Adobe Acrobat and Reader versions 20182022-05-13

🕵️Threat Intelligence

6
Trendmicro
August Patch Tuesday: A Tale of Two Zero-Days2018-08-15
Trendmicro
August Patch Tuesday: A Tale of Two Zero-Days2018-08-15
Trendmicro
August Patch Tuesday: A Tale of Two Zero-Days2018-08-15
Trendmicro
August Patch Tuesday: A Tale of Two Zero-Days2018-08-15
Trendmicro
August Patch Tuesday: A Tale of Two Zero-Days2018-08-15