{"id":"CVE-2018-4987","aliases":["EUVD-2018-16772","GHSA-mc7f-9mrx-p9g3"],"status":"published","title":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and...","description":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13322,"percentile":0.96428,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2018-07-09T19:00:00Z","modified":"2026-06-17T01:59:24Z","products":[{"vendor":"adobe","product":"acrobat_dc"},{"vendor":"adobe","product":"acrobat_reader_dc"}],"references":[{"url":"http://www.securityfocus.com/bid/104173","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/acrobat/apsb18-09.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040920","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4987"},{"url":"https://github.com/advisories/GHSA-mc7f-9mrx-p9g3"}],"sources":{"cve":[{"id":"CVE-2018-4987","description":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","status":"published","published":"2018-07-09T19:00:00Z","modified":"2024-08-05T05:18:27.136Z","updated_at":"2026-11-02T14:35:08.341767Z"}],"euvd":[{"id":"EUVD-2018-16772","description":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","status":"published","published":"2018-07-09T19:00:00Z","modified":"2024-08-05T05:18:27Z","updated_at":"2026-11-03T02:40:12.166986Z"}],"ghsa":[{"id":"GHSA-mc7f-9mrx-p9g3","title":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and...","description":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","status":"published","published":"2022-05-14T00:53:46Z","modified":"2023-02-02T05:02:41Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:51:29.873049Z"}],"nvd":[{"id":"CVE-2018-4987","description":"Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","status":"published","published":"2018-07-09T19:29:03.107Z","modified":"2026-06-17T01:59:24.777Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:32.929986Z"}]}}