← Back

CVE-2018-4990

nvd nist
Published: Jul 9, 2018Modified: Oct 23, 2025CISA KEV

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected (6)

Adobe
2 products
Acrobat Dc
Acrobat Reader Dc
Configuration A
6 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat Dc
From 15.006.30060 to 15.006.30417
Acrobat Dc
From 17.011.30059 to 17.011.30079
Acrobat Dc
From 15.008.20082 to 18.011.20038
Adobe
Acrobat Reader Dc
From 15.006.30060 to 15.006.30417
Acrobat Reader Dc
From 17.011.30059 to 17.011.30079
Acrobat Reader Dc
From 15.008.20082 to 18.011.20038
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-415
Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (7)

Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.