CVE-2018-15981

—

CVSS 3.0

9.8 critical

EPSS

12%p96

Published

Nov 29, 2018 (Nov 29, 2018)

Modified

Jun 17, 2026

Description

Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-704
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.7%)

In the news2 stories

Adobe plugs critical RCE Flash Player flaw, update ASAP! Exploitation may be imminent

Help Net SecurityDec 15, 12:34 UTC · Dec 15, 2023Vulnerability CVE-2018-15981

60

December Patch Tuesday forecast: Let it snow, let it snow, let it snow

Help Net SecurityJan 3, 13:18 UTC · Jan 3, 2019Vulnerability CVE-2018-15981 CVE-2018-15982

60