Search vulnerabilities

Results 2,980

Export CSV
CVE-2018-4878

flash-plugin: use-after-free causing remote code execution (APSB18-03)

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

CVSS 3.1 · 7.8 High EPSS 90.3% KEV · Listed
Vendors
Adobe Apple Google and 3 more
Products
CVE-2018-5002

flash-plugin: Arbitrary Code Execution vulnerability (APSB18-19)

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVSS 3.1 · 7.8 High EPSS 24.4% KEV · Listed
Vendors
Adobe Apple Google and 3 more