CVE-2017-2958

7.8 highEPSS 9.7%

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 9.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2017-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_dc
adobe:acrobat_reader_dc
adobe:reader

References

http://www.securityfocus.com/bid/95343
http://www.securitytracker.com/id/1037574
https://helpx.adobe.com/security/products/acrobat/apsb17-01.html
http://www.securityfocus.com/bid/95343
http://www.securitytracker.com/id/1037574

Check your stack JSON