CVE-2018-5001

—

CVSS 3.0

6.5 medium

EPSS

13%p96

Published

Jul 9, 2018 (Jul 9, 2018)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-125
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (13.3%)

In the news2 stories

Adobe Issues Patch for Actively Exploited Flash Player Zero

The Hacker NewsJun 7, 16:53 UTC · Jun 7, 2018Vulnerability in the wildCVE-2018-5002 CVE-2018-5000 CVE-2018-5001

Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East

Security AffairsJun 7, 14:17 UTC · Jun 7, 2018Exploit / PoC CVE-2018-5002 CVE-2018-4945 CVE-2018-5000+2 CVEs