CVE-2018-4991

—

CVSS 3.0

9.8 critical

EPSS

5%p91

Published

May 19, 2018 (May 19, 2018)

Modified

Jun 17, 2026

Description

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass.

Vendors: adobe
Products: creative cloud
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news1 stories

Adobe fixed a Critical Code Execution issue in Flash Player

Security AffairsMay 14, 20:22 UTC · May 14, 2018Vulnerability CVE-2018-4944 CVE-2018-4991 CVE-2018-4992+1 CVEs