CVE-2018-4888

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability. The vulnerability is triggered by a crafted PDF file that can cause a memory access violation exception in the XFA engine because of a dangling reference left as a consequence of freeing an object in the computation that manipulates internal nodes in a graph representation of a document object model used in XFA. Successful exploitation could lead to arbitrary code execution.

• CWE-416

• http://www.securityfocus.com/bid/102995Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040364Third Party Advisory, VDB Entry
• https://helpx.adobe.com/security/products/acrobat/apsb18-02.htmlVendor Advisory
• http://www.securityfocus.com/bid/102995Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040364Third Party Advisory, VDB Entry
• https://helpx.adobe.com/security/products/acrobat/apsb18-02.htmlVendor Advisory

Published

Feb 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4882An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4883An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4884An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4885An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4886An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4887An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4889An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4890An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4891An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4892An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4893An issue was discovered in Adobe Acrobat Reader 2018.009.200…
• CVE-2018-4894An issue was discovered in Adobe Acrobat Reader 2018.009.200…