9.3
CVE-2018-4920
- EPSS 4.09%
- Published 19.05.2018 17:29:00
- Last modified 21.11.2024 04:07:42
- Source psirt@adobe.com
- Teams watchlist Login
- Open Login
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Flash Player Desktop Runtime Version <= 28.0.0.161
Adobe ≫ Flash Player SwPlatformchrome Version <= 28.0.0.161
Adobe ≫ Flash Player SwPlatformedge Version <= 28.0.0.161
Adobe ≫ Flash Player SwPlatforminternet_explorer Version <= 28.0.0.161
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.09% | 0.879 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.