CVE-2018-4883 json
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 an…
published 2018-02-27 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-16668
- cvss
- 6.5
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 10.8%
- EPSS 10.8% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs because of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion engine that handles Enhanced Metafile Format (EMF). A successful attack can lead to sensitive data exposure.
Exploit prediction
10.79% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 6.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- n/a Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions
Classification
- Weakness
-
- CWE-125 Out-of-bounds Read
References
-
helpx.adobe.com
/security/products/acrobat/apsb18-02.html
vendor-advisory
-
securityfocus.com
/bid/102996
vdb-entry, third-party-advisory
-
securitytracker.com
/id/1040364
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2018-4883
- NVD CVE-2018-4883
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.