CVE-2018-4995: Adobe Acrobat DC

Critical severity, CVSS 9.8. EPSS: 7.1% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an XFA '\n' POST injection vulnerability. Successful exploitation could lead to a security bypass.

Affected products

• Adobe Acrobat DC: from 15.006.30060, up to and including 15.006.30417; from 15.008.20082, up to and including 18.011.20038; from 17.011.30059, up to and including 17.011.30079
• Adobe Acrobat Reader DC: from 15.006.30060, up to and including 15.006.30417; from 15.008.20082, up to and including 18.011.20038; from 17.011.30059, up to and including 17.011.30079

Published 2018-07-09. Last modified 2026-06-17.