CVE-2018-4919 Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
HighCVSS 8.8
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player desktop runtime | <= 28.0.0.161 | No fix listed |
| Adobe flash player | <= 28.0.0.161 | No fix listed |
References
- 103385 broken-link third-party-advisory vdb-entry
- 1040509 broken-link third-party-advisory vdb-entry
- RHSA-2018:0520 third-party-advisory vendor-advisory
- helpx.adobe.com patch vendor-advisory