CVE-2018-15990: Adobe Acrobat DC

High severity, CVSS 7.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Acrobat DC: from 15.006.30060, up to and including 15.006.30457; from 15.008.20082, up to and including 19.008.20081; from 17.011.30059, up to and including 17.011.30106; from 15.006.30060, up to and including 15.006.30456; from 15.008.20082, up to and including 19.008.20080; from 17.011.30059, up to and including 17.011.30105
• Adobe Acrobat Reader DC: from 15.006.30060, up to and including 15.006.30457; from 15.008.20082, up to and including 19.008.20081; from 17.011.30059, up to and including 17.011.30106; from 15.006.30060, up to and including 15.006.30456; from 15.008.200082, up to and including 19.008.20080; from 17.011.30059, up to and including 17.011.30105

Published 2019-01-18. Last modified 2026-06-17.