CVE-2018-4993

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.

Affected

Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

86.72% chance of exploitation in the next 30 days, 100th percentile

Published

2018-07-09

Updated

2024-08-05

Proof-of-concept exploits (1)

• zenzue/Simple-Malicious-PDf0★ · 2024-09-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/fileformat/badpdf.rb

Security advisories

• https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
• http://www.securityfocus.com/bid/104177
• http://www.securitytracker.com/id/1040920

References

• CVE Record
• NVD entry

Related

• CVE-2024-38063
• CVE-2025-50154
• CVE-2025-9074
• CVE-2026-31694
• CVE-2026-55040