CVE-2018-4993

7.5 highEPSS 87%

High (7.5) in adobe. EPSS 87% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 87% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

http://www.securityfocus.com/bid/104177
http://www.securitytracker.com/id/1040920
https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
http://www.securityfocus.com/bid/104177
http://www.securitytracker.com/id/1040920

Check your stack JSON