CVE-2018-15978

—

CVSS 3.0

7.5 high

EPSS

7%p94

Published

Nov 29, 2018 (Nov 29, 2018)

Modified

Jun 17, 2026

Description

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-125
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.4%)

In the news1 stories

Adobe Patch Tuesday updates for November 2018 fix known Acrobat flaw

Security AffairsNov 14, 13:44 UTC · Nov 14, 2018Vulnerability CVE-2018-15979 CVE-2018-4993 CVE-2018-15978

35