CVE-2018-5007

Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected

Adobe Flash Player 30.0.0.113 and earlier versions

CVSS v3.0 NVD

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

17.79% chance of exploitation in the next 30 days, 97th percentile

Published

2018-07-20

Updated

2024-08-05

Proof-of-concept exploits (1)

• StCyr/CVESearchMonitor1★ · 2018-10-26

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb18-24.html
• http://www.securityfocus.com/bid/104698
• http://www.securitytracker.com/id/1041248
• https://access.redhat.com/errata/RHSA-2018:2175

References

• CVE Record
• NVD entry

Related

• CVE-2018-5008