CVE-2018-15976 Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

HighCVSS 7.8 EPSS 5.4%

Published: 2018-10-17 21:00
Updated: 2026-06-17 04:43
Exploit status: No public exploit known

Description

Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

Product	Affected versions	Fixed in
Adobe technical communications suite	<= 1.0.5.1	No fix listed
Adobe Technical Communications Suite	= 1.0.5.1 and below versions	No fix listed

References

105535 third-party-advisory vdb-entry
1041819 third-party-advisory vdb-entry
1041820 third-party-advisory vdb-entry
helpx.adobe.com patch vendor-advisory
exchange.xforce.ibmcloud.com third-party-advisory

CVSS v3.0

7.8 High

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector: Local
Attack Complexity: Low
Privileges Required: None
User Interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.0 7.8 · nvd@nist.gov
v2.0 6.8 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 5.37% (percentile 92.8)
CWE: CWE-427

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.