CVE-2018-4872: adobe acrobat
Vulnerability summary
CVE-2018-4872 is a critical (CVSS 10.0) vulnerability in adobe acrobat. EPSS estimates a 11.52% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities.
Timeline
- 27-02-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is a security bypass vulnerability that leads to a sandbox escape. Specifically, the vulnerability exists in the way a cross call is handled.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
11.52%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 11.52% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Adobe4 products
- acrobat≥ 17.0, ≤ 17.011.30070
- acrobat_dc≥ -, ≤ 18.009.20050 | ≥ 15.0, ≤ 15.006.30394
- acrobat_reader≥ 17.0, ≤ 17.011.30070
- acrobat_reader_dc≥ -, ≤ 18.009.20050 | ≥ 15.0, ≤ 15.006.30394
1 vendor · 4 products