CVE-2018-5000

—

CVSS 3.0

6.5 medium

EPSS

14%p96

Published

Jul 9, 2018 (Jul 9, 2018)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-190
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (13.9%)

In the news2 stories

Adobe Issues Patch for Actively Exploited Flash Player Zero

The Hacker NewsJun 7, 16:53 UTC · Jun 7, 2018Vulnerability in the wildCVE-2018-5002 CVE-2018-5000 CVE-2018-5001

Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East

Security AffairsJun 7, 14:17 UTC · Jun 7, 2018Exploit / PoC CVE-2018-5002 CVE-2018-4945 CVE-2018-5000+2 CVEs