CVE-2018-4944

CVSS 3.0: 9.8 critical
EPSS: 9%p95
Published: May 19, 2018 · May 19, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-4944 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendors: adobe redhat

Products: flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation

Weakness: CWE-704

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.8%)

In the news

3 stories

Adobe issued security updates for 47 vulnerabilities in Acrobat DC and Reader

Security AffairsMay 15, 06:33 UTC · May 15, 2018VulnerabilityCVE-2018-49443 · 1 read

Adobe fixed a Critical Code Execution issue in Flash Player

Security AffairsMay 14, 20:22 UTC · May 14, 2018VulnerabilityCVE-2018-4944 CVE-2018-4991 CVE-2018-4992+12

Microsoft Patch Tuesday

Cisco TalosMay 8, 19:02 UTC · May 8, 2018VulnerabilityCVE-2018-4944 CVE-2018-8174 CVE-2018-0959+613 · 1 read