CVE-2018-15937

7.8 highEPSS 28%

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 28% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2018-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

http://www.securityfocus.com/bid/105442
http://www.securitytracker.com/id/1041809
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/
http://www.securityfocus.com/bid/105442

Check your stack JSON