CVE-2018-4990

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-4990
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/104167 Third Party Advisory VDB Entry Broken Link
http://www.securitytracker.com/id/1040920 Third Party Advisory VDB Entry Broken Link
https://helpx.adobe.com/security/products/acrobat/apsb18-09.html Vendor Advisory
http://www.securityfocus.com/bid/104167 Third Party Advisory VDB Entry Broken Link
http://www.securitytracker.com/id/1040920 Third Party Advisory VDB Entry Broken Link
https://helpx.adobe.com/security/products/acrobat/apsb18-09.html Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*
OR cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
History

23 Oct 2025, 14:51

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/104167 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/104167 - Third Party Advisory, VDB Entry, Broken Link
References () http://www.securitytracker.com/id/1040920 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040920 - Third Party Advisory, VDB Entry, Broken Link
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990 - Third Party Advisory, US Government Resource

22 Oct 2025, 00:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990 -

21 Oct 2025, 20:17

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-4990 -
Information

Published : 2018-07-09 19:29

Updated : 2025-10-23 14:51

NVD link : CVE-2018-4990

Mitre link : CVE-2018-4990

CVE.ORG link : CVE-2018-4990

JSON object : View

Products Affected

apple

  • mac_os_x

microsoft

  • windows

adobe

  • acrobat_reader_dc
  • acrobat_dc
CWE
CWE-415

Double Free