CVE-2018-4878

Fixed in a distro release ExploitedEPSS 90%CVSS 7.8

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.

Published 2018-02-06 · In CISA KEV since 2021-11-03 · CVE record · OSV

Products: adobe flash_player, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases