CVE-2018-4990
Adobe Acrobat and Reader Double Free Vulnerability
CVSS
—
No CVSS
EPSS
36.2%
p98
KEV
YES
Jun 8, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
36.2%EPSS · 30 days36.2%
2026-09-162026-10-14
Product
Adobe / Acrobat and Reader
Vulnerability
Adobe Acrobat and Reader Double Free Vulnerability
Added to KEV
Jun 8, 2022
Remediate by
Jun 22, 2022
Known ransomware use
No
Summary description
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-4990
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-346218.6 HIG82.0%
KEV—75Adobe Acrobat and Reader Prototype Pollution Vulnerability49dCVE-2008-2992—99.9%
KEV—80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3459—99.7%
KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2009-3953—99.7%
KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—