CVE-2018-4991

CVSS 3.0: 9.8 critical
EPSS: 5%p91
Published: May 19, 2018 · May 19, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-4991 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass.

Vendors: adobe

Products: creative cloud

Weakness: CWE-295

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news

1 story

Adobe fixed a Critical Code Execution issue in Flash Player

Security AffairsMay 14, 20:22 UTC · May 14, 2018VulnerabilityCVE-2018-4944 CVE-2018-4991 CVE-2018-4992+12