CVE-2018-15967

HIGH 7.5CVE-2018-15967 · Published 25/09/2018 · updated 17/06/2026

In short

CVE-2018-15967 is a HIGH (CVSS 7.5) vulnerability affecting flash player (adobe), flash player desktop runtime (adobe).
Chance of exploitation in the next 30 days (EPSS): 7.2%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flash player adobe	`≤ 31.0.0.108`	No fix yet
flash player desktop runtime adobe	`≤ 31.0.0.108`	No fix yet

Description

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure.

References

securityfocus.com/bid/105315 · Third Party Advisory
securitytracker.com/id/1041620 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:2707 · Third Party Advisory
helpx.adobe.com/security/products/flash-player/apsb18-31.html · Vendor Advisory

More vulnerabilities in flash player

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

flash player

adobe

≤ 31.0.0.108

No fix yet

flash player desktop runtime

adobe

≤ 31.0.0.108

No fix yet

More vulnerabilities in flash player

See all →