Adobe Flash Player Use-After-Free Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2018-15982 · Published 18/01/2019 · updated 01/10/2026

Adobe Flash Player Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/02/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

Package	Affected versions	Patched versions
flash player adobe	`≤ 31.0.0.153`	No fix yet
flash player installer adobe	`≤ 31.0.0.108`	No fix yet

Description

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

References

securityfocus.com/bid/106116 · Broken Link
access.redhat.com/errata/RHSA-2018:3795 · Third Party Advisory
helpx.adobe.com/security/products/flash-player/apsb18-42.html · Patch
exploit-db.com/exploits/46051 · Exploit
cisagov/vulnrichment · Issue Tracking
cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
CISA KEV · CVE-2018-15982

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free