Description
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
References (4)
Scores
CVSS v3
9.8
EPSS
0.2405
EPSS Percentile
96.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-704
Status
published
Products (5)
adobe/flash_player
< 31.0.0.148 (3 CPE variants)
adobe/flash_player_desktop_runtime
< 31.0.0.148
redhat/enterprise_linux_desktop
6.0
redhat/enterprise_linux_server
6.0
redhat/enterprise_linux_workstation
6.0
Published
Nov 29, 2018
Tracked Since
Feb 18, 2026