CVE-2018-15982
Adobe Flash Player Use-After-Free Vulnerability
Published Jan 18, 2019 · updated Oct 1, 2026 · adobe flash player
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Timeline
Detection, updates, and resolution for this record.
Jan 18, 2019 · Catalog
Detected
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Feb 15, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Aug 15, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Oct 1, 2026 · Catalog
Updated
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Aug 15, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe adobe/flash player installerversion unspecified
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux server6.0
- cpe redhat/enterprise linux workstation6.0
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2018-15982
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
cisa.gov - CVE.orgCVE-2018-15982
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-15982
30-day exploitation probability 89.6%
first.org - Exploit Database46051
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2018-15982
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd.nist.gov