CVE-2018-5012

8.8 highEPSS 9.1%

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 9.1% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2018-07-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

http://www.securityfocus.com/bid/104701
http://www.securitytracker.com/id/1041250
https://helpx.adobe.com/security/products/acrobat/apsb18-21.html
http://www.securityfocus.com/bid/104701
http://www.securitytracker.com/id/1041250

Check your stack JSON