CVE-2018-5002
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Published Jul 9, 2018 · updated Jun 16, 2026 · adobe flash player desktop runtime
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Timeline
Detection, updates, and resolution for this record.
Jul 9, 2018 · Catalog
Detected
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
May 23, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Jun 13, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Jun 13, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe adobe/flash player desktop runtimeversion unspecified
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux server6.0
- cpe redhat/enterprise linux workstation6.0
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2018-5002
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
cisa.gov - CVE.orgCVE-2018-5002
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-5002
30-day exploitation probability 25.1%
first.org - NIST NVDCVE-2018-5002
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd.nist.gov