CVE-2018-12828

CRITICAL 9.8CVE-2018-12828 · Published 29/08/2018 · updated 17/06/2026

In short

CVE-2018-12828 is a CRITICAL (CVSS 9.8) vulnerability affecting flash player (adobe).
Chance of exploitation in the next 30 days (EPSS): 7.1%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flash player adobe	`≤ 30.0.0.154`	No fix yet

Description

Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.

References

securityfocus.com/bid/105071 · Third Party Advisory
securitytracker.com/id/1041448 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:2435 · Third Party Advisory
helpx.adobe.com/security/products/flash-player/apsb18-25.html · Patch

More vulnerabilities in flash player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

flash player

adobe

≤ 30.0.0.154

No fix yet

More vulnerabilities in flash player

See all →