{"schemaVersion":3,"id":"CVE-2018-15982","aliases":["RHSA-2018:3795","UBUNTU-CVE-2018-15982"],"status":"published","duplicateOf":null,"title":"Adobe Flash Player Use-After-Free Vulnerability","description":"Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","dates":{"published":"2019-01-18T17:00:00.000Z","modified":"2026-10-01T20:29:13.569Z","reserved":null,"kevAdded":["2022-02-15T00:00:00.000Z"],"kevDue":["2022-08-15T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":0.89581,"percentile":0.99788,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.4349999999999965,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.89146},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.89581,"percentile":0.99788}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.89146,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.89581,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.89581,"percentile":0.99788}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-02-15T00:00:00.000Z","dueDate":"2022-08-15T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Adobe Flash Player Use-After-Free Vulnerability","description":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","label":"nvd.nist.gov/vuln/detail/CVE-2018-15982"}],"vendor":"Adobe","product":"Flash Player","ransomware":true,"ransomwareUse":"Known","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-02-15T00:00:00.000Z","dueDate":"2022-08-15T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Adobe Flash Player Use-After-Free Vulnerability","description":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","label":"nvd.nist.gov/vuln/detail/CVE-2018-15982"}],"vendor":"Adobe","product":"Flash Player","ransomware":true,"ransomwareUse":"Known","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"known","sources":["cisa"]},"exploits":[{"id":"46051","name":"Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution (PoC)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/46051","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"local","platform":"windows","file":"exploits/windows/local/46051.txt","codes":["CVE-2018-15982"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"adobe","product":"flash_player","name":"Flash Player","label":"flash_player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 31.0.0.153","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 31.0.0.153","eol":null,"hubHref":"/vendor/adobe/flash_player"},{"vendor":"adobe","product":"flash_player_installer","name":"flash player installer","label":"flash_player_installer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 31.0.0.108","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 31.0.0.108","eol":null,"hubHref":"/vendor/adobe/flash_player_installer"},{"vendor":"ubuntu","product":"flashplugin-nonfree","name":"flashplugin-nonfree","label":"flashplugin-nonfree","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/flashplugin-nonfree","purlType":"deb","versions":[{"text":"< 32.0.0.101ubuntu0.14.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 32.0.0.101ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 32.0.0.101ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.0.0.101ubuntu0.14.04.1 | < 32.0.0.101ubuntu0.16.04.1 | < 32.0.0.101ubuntu0.18.04.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"flash-plugin","name":"flash-plugin","label":"flash-plugin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/flash-plugin","purlType":"rpm","versions":[{"text":"< 0:32.0.0.101-1.el6_10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:32.0.0.101-1.el6_10","eol":null,"hubHref":null}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3795","label":"access.redhat.com/errata/RHSA-2018:3795","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb18-42.html","label":"helpx.adobe.com/security/products/flash-player/apsb18-42.html","hostname":"helpx.adobe.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory","ARTICLE","REPORT"]},{"url":"https://www.exploit-db.com/exploits/46051/","label":"www.exploit-db.com/exploits/46051/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/106116","label":"www.securityfocus.com/bid/106116","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982","hostname":"www.cisa.gov","tags":["Government Resource","Third Party Advisory","US Government Resource"]},{"url":"https://github.com/cisagov/vulnrichment/issues/195","label":"github.com/cisagov/vulnrichment/issues/195","hostname":"github.com","tags":["Issue Tracking"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656585","label":"bugzilla.redhat.com/show_bug.cgi?id=1656585","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3795.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3795.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15982","label":"access.redhat.com/security/cve/CVE-2018-15982","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15982","label":"www.cve.org/CVERecord?id=CVE-2018-15982","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","label":"nvd.nist.gov/vuln/detail/CVE-2018-15982","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE","REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-15982","label":"ubuntu.com/security/CVE-2018-15982","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://rhn.redhat.com/errata/RHSA-2018-3795.html","label":"rhn.redhat.com/errata/RHSA-2018-3795.html","hostname":"rhn.redhat.com","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["MGASA-2018-0478"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-01-18T17:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-02-15T00:00:00.000Z","label":"Added to CISA KEV","detail":"Adobe Flash Player Use-After-Free Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-08-15T00:00:00.000Z","label":"CISA remediation due","detail":"The impacted product is end-of-life and should be disconnected if still in use.","source":"cisa"},{"kind":"modified","date":"2026-10-01T20:29:13.569Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:03:13.959Z","stale":false,"partial":false}}