VULNERABILITY INTELLIGENCE
CVE-2018-4919
CVSS score8.8 HIGH
EPSS probability7.41%
CISA KEVNot currently listed
Published2018-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Weakness classification
- CWE-416: Use After Free
Primary references
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory