CVE-2018-15982
Adobe Flash Player Use-After-Free Vulnerability
Published Jan 18, 2019 · updated Oct 1, 2026 · adobe flash player
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 18, 2019 · Catalog
Detected
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Feb 15, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Aug 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Oct 1, 2026 · Catalog
Updated
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Aug 15, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe adobe/flash player installerversion unspecified
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux server6.0
- cpe redhat/enterprise linux workstation6.0
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2018-15982
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
cisa.gov - CVE.orgVulnerability recordCVE-2018-15982
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2018-15982
30-day exploitation probability 89.6%
first.org - Exploit DatabasePublic exploit reference46051
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDVulnerability recordCVE-2018-15982
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd.nist.gov