CVE-2018-15982
Critical · 9.8 CISA KEV · ransomwareCVSS
9.8
EPSS
89.6%
Published
Jan 18, 2019
CISA due date
Aug 15, 2022
The record
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:6 | flash-player-plugin | 0 | 32.0.0.101-1.mga6.nonfree |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:32.0.0.101-1.el6_10 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 32.0.0.101ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | flashplugin-nonfree | 0 | 32.0.0.101ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | flashplugin-nonfree | 0 | 32.0.0.101ubuntu0.18.04.1 |
Related vulnerabilities
- CVE-2018-15981 Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Also affects flash-player-plugin
- CVE-2018-12827 Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Also affects flash-player-plugin
- CVE-2018-12824 Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Also affects flash-player-plugin
- CVE-2018-5007 Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Also affects flash-player-plugin
- CVE-2018-5001 Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read… Also affects flash-player-plugin
- CVE-2018-5000 Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Also affects flash-player-plugin
- CVE-2018-5002 Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow… Also affects flash-player-plugin
- CVE-2018-4878 A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. Also affects flash-player-plugin