CVE-2018-4944: adobe flash_player Incorrect Type Conversion or Cast

EPSS trend

Probability

8.63%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

-0.17 pp

From 8.80% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

www.securityfocus.com/bid/104101VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id/1040840VDB EntryX Refsource SECTRACKThird Party Advisory
access.redhat.com/errata/RHSA-2018:1367Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
security.gentoo.org/glsa/201806-02Vendor AdvisoryX Refsource GENTOOThird Party Advisory
helpx.adobe.com/security/products/flash-player/apsb18-16.htmlX Refsource MISCVendor AdvisoryWEBARTICLEREPORT
advisories.mageia.org/MGASA-2018-0233.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=23006REPORT
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1576040REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1367.jsonAdvisory

Show all 15 references

access.redhat.com/security/cve/CVE-2018-4944REPORT
www.cve.org/CVERecord?id=CVE-2018-4944AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2018-4944Advisory
ubuntu.com/security/CVE-2018-4944REPORT
rhn.redhat.com/errata/RHSA-2018-1367.htmlREPORT

Related vulnerabilities

CVE-2018-16864chainguardpy3-systemd+180.71%7y ago11-01-2019 20:00An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.CVE-2018-1126canonicalubuntu_linux+121.88%8y ago23-05-2018 13:00procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.CVE-2018-1054debian389-ds-base+74.56%8y ago07-03-2018 13:00An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.CVE-2018-15967adobeflash_player+67.17%8y ago25-09-2018 13:00Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure.CVE-2018-15983adobeflash_player+13.28%7y ago18-01-2019 17:00Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.CVE-2018-15981adobeflash_player+611.70%7y ago29-11-2018 20:00Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

All vulnerabilities inflash_player enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation

CVE-2018-4944: adobe flash_player Incorrect Type Conversion or Cast

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References