CVE-2018-4993

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@adobe.com

Published

2018-07-09

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Acrobat Dc (Adobe)
• Acrobat Reader Dc (Adobe)

References

• http://www.securityfocus.com/bid/104177
• http://www.securitytracker.com/id/1040920
• https://helpx.adobe.com/security/products/acrobat/apsb18-09.html