CVE-2018-4891: adobe acrobat Out-of-bounds Read
Vulnerability summary
CVE-2018-4891 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in adobe acrobat. EPSS estimates a 10.79% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.
Timeline
- 27-02-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS module that handles TIFF data. A successful attack can lead to sensitive data exposure.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
10.79%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.79% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe4 products
- acrobat≥ 17.0, ≤ 17.011.30070
- acrobat_dc≥ -, ≤ 18.009.20050 | ≥ 15.0, ≤ 15.006.30394
- acrobat_reader≥ 17.0, ≤ 17.011.30070
- acrobat_reader_dc≥ -, ≤ 18.009.20050 | ≥ 15.0, ≤ 15.006.30394
1 vendor · 4 products