CVE-2018-4996: Use After Free

Q: What is the severity of CVE-2018-4996?

CVE-2018-4996 is rated as critical due to its potential for arbitrary code execution.

Q: How do I fix CVE-2018-4996?

To fix CVE-2018-4996, users should update Adobe Acrobat and Reader to the latest versions.

Q: What versions are affected by CVE-2018-4996?

CVE-2018-4996 affects Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier.

Q: What type of vulnerability is CVE-2018-4996?

CVE-2018-4996 is a use-after-free vulnerability which could allow an attacker to execute arbitrary code.

Q: Is there a workaround for CVE-2018-4996?

There are no official workarounds for CVE-2018-4996, the recommended action is to update to fixed versions.

Published Jul 9, 2018

Updated

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<=15.006.30417

Adobe Acrobat DC>=15.008.20082<=18.011.20038

Adobe Acrobat DC>=17.011.30059<=17.011.30079

Adobe Acrobat Reader DC>=15.006.30060<=15.006.30417

Adobe Acrobat Reader DC>=15.008.20082<=18.011.20038

Adobe Acrobat Reader DC>=17.011.30059<=17.011.30079

Apple iOS and macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/acrobat/apsb18-09.html

Event History

Jul 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-4996?

CVE-2018-4996 is rated as critical due to its potential for arbitrary code execution.

How do I fix CVE-2018-4996?