CVE-2018-4913

No fix known EPSS 14%

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is triggered by crafted XFA script definitions in a PDF file. Successful exploitation could lead to arbitrary code execution.

Published 2018-02-27 · CVE record · OSV

Products: adobe acrobat, adobe acrobat_dc, adobe acrobat_reader, adobe acrobat_reader_dc