CVE-2018-4997: Adobe Acrobat

High severity, CVSS 8.8. EPSS: 8.4% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected products

• Adobe Acrobat: from 17.011.30059, up to and including 17.011.30070
• Adobe Acrobat DC: from 15.006.30060, up to and including 15.006.30394; from 15.008.20082, up to and including 18.009.20050
• Adobe Acrobat Reader: from 17.011.30059, up to and including 17.011.30070
• Adobe Acrobat Reader DC: from 15.006.30060, up to and including 15.006.30394; from 15.008.20082, up to and including 18.009.20050

Published 2018-07-09. Last modified 2026-06-17.