VULNERABILITY INTELLIGENCE

CVE-2018-4944

CVSS score9.8 CRITICAL
EPSS probability8.63%
CISA KEVNot currently listed
Published2018-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Weakness classification

  • CWE-704: Incorrect Type Conversion or Cast

Primary references