Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Adobe Acrobat and Reader may expose data

CVE-2018-4981 · published 8 years ago
Summary

Older versions of Adobe Acrobat and Adobe Reader can let a malicious file reveal information from your computer. An attacker who tricks a user into opening a crafted PDF could see data they shouldn't. Update to the latest Acrobat and Reader releases to close this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe acrobat_dc >= 15.006.30417, < 15.006.30418
>= 17.011.30079, < 17.011.30080
>= 18.011.20038, < 18.011.20040
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
adobe acrobat_reader_dc >= 15.006.30417, < 15.006.30418
>= 17.011.30079, < 17.011.30080
>= 18.011.20038, < 18.011.20040
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
Original advisory text
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead...
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
11% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published9 Jul 2018
Updated17 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-4981 · NVD
Track software like this
Free during beta