CVE-2018-4995

—

CVSS 3.0

9.8 critical

EPSS

7%p94

Published

Jul 9, 2018 (Jul 9, 2018)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an XFA '\n' POST injection vulnerability. Successful exploitation could lead to a security bypass.

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Weakness: CWE-74
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.2%)

In the news0 stories

No ingested article mentions this CVE yet.