CVE-2018-15982

KEV

🔴 Łataj teraz

Wykorzystanie po zwolnieniu pamięci w Flash Player umożliwia zdalne wykonanie kodu.

CVSS

7.8

EPSS

82.5%

Exploit

weaponized

Vendor

adobe

Opis źródłowy (NVD)

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

exploit rce Brak patcha

Źródła i daty

Źródło	Wartość
NVD – CVSS	7.8
CISA KEV (aktywnie wykorzystywane)	Tak
FIRST EPSS (prawdopodobieństwo exploita)	82.5%
Opublikowano (NVD)	2019-01-18 17:29:01 UTC
Ostatnia modyfikacja (NVD)	2026-08-13 05:17:16 UTC

Referencje

http://www.securityfocus.com/bid/106116 (psirt@adobe.com) [Broken Link, Third Party Advisory, VDB Entry]
https://access.redhat.com/errata/RHSA-2018:3795 (psirt@adobe.com) [Third Party Advisory]
https://helpx.adobe.com/security/products/flash-player/apsb18-42.html (psirt@adobe.com) [Patch, Vendor Advisory]
https://www.exploit-db.com/exploits/46051/ (psirt@adobe.com) [Exploit, Third Party Advisory, VDB Entry]
https://github.com/cisagov/vulnrichment/issues/195 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [Issue Tracking]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [Third Party Advisory, US Government Resource]