VULNERABILITY INTELLIGENCE

CVE-2018-4920

CVSS score8.8 HIGH
EPSS probability7.57%
CISA KEVNot currently listed
Published2018-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Weakness classification

  • nvd@nist.gov: CWE-843

Primary references