CVE-2018-4937

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected

Adobe Flash Player 29.0.0.113 and earlier versions

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

25.69% chance of exploitation in the next 30 days, 98th percentile

Published

2018-05-19

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44529

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb18-08.html
• http://www.securityfocus.com/bid/103708
• http://www.securitytracker.com/id/1040648
• https://access.redhat.com/errata/RHSA-2018:1119
• https://security.gentoo.org/glsa/201804-11

References

• CVE Record
• NVD entry