CVE-2018-15982

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-15982
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.securityfocus.com/bid/106116 Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3795 Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb18-42.html Patch Vendor Advisory
https://www.exploit-db.com/exploits/46051/ Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/106116 Broken Link Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3795 Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb18-42.html Patch Vendor Advisory
https://www.exploit-db.com/exploits/46051/ Exploit Third Party Advisory VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*
OR cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_11:*:*
OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:a:adobe:flash_player_installer:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

23 Oct 2025, 14:51

Type Values Removed Values Added
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 - Third Party Advisory, US Government Resource

22 Oct 2025, 00:16

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 -

21 Oct 2025, 20:17

Type Values Removed Values Added
References
  • {'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}

21 Oct 2025, 19:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 -

13 Feb 2025, 17:40

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/106116 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/106116 - Broken Link, Third Party Advisory, VDB Entry

21 Nov 2024, 03:51

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/106116 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/106116 - Third Party Advisory, VDB Entry
References () https://access.redhat.com/errata/RHSA-2018:3795 - Third Party Advisory () https://access.redhat.com/errata/RHSA-2018:3795 - Third Party Advisory
References () https://helpx.adobe.com/security/products/flash-player/apsb18-42.html - Patch, Vendor Advisory () https://helpx.adobe.com/security/products/flash-player/apsb18-42.html - Patch, Vendor Advisory
References () https://www.exploit-db.com/exploits/46051/ - Exploit, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/46051/ - Exploit, Third Party Advisory, VDB Entry
Information

Published : 2019-01-18 17:29

Updated : 2025-10-23 14:51

NVD link : CVE-2018-15982

Mitre link : CVE-2018-15982

CVE.ORG link : CVE-2018-15982

JSON object : View

Products Affected

microsoft

  • windows_10
  • windows_8.1
  • windows

apple

  • mac_os_x

redhat

  • enterprise_linux_desktop
  • enterprise_linux_workstation
  • enterprise_linux_server

google

  • chrome_os

adobe

  • flash_player
  • flash_player_installer

linux

  • linux_kernel
CWE
CWE-416

Use After Free