Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2018-15982 Details
Description
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 14, 2022Exploitation: ActiveAutomatable: YesTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/cisagov/vulnrichment/issues/195 | CISA-ADP | Issue Tracking |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982 | CISA-ADP | Third Party AdvisoryUS Government Resource |
| https://access.redhat.com/errata/RHSA-2018:3795 | CVE | Third Party Advisory |
| https://helpx.adobe.com/security/products/flash-player/apsb18-42.html | CVE | PatchVendor Advisory |
| https://www.exploit-db.com/exploits/46051/ | CVE | ExploitThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/106116 | CVE | Broken LinkThird Party AdvisoryVDB Entry |
| https://access.redhat.com/errata/RHSA-2018:3795 | [email protected] | Third Party Advisory |
| https://helpx.adobe.com/security/products/flash-player/apsb18-42.html | [email protected] | PatchVendor Advisory |
| https://www.exploit-db.com/exploits/46051/ | [email protected] | ExploitThird Party AdvisoryVDB Entry |
| http://www.securityfocus.com/bid/106116 | [email protected] | Broken LinkThird Party AdvisoryVDB Entry |
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Adobe Flash Player Use-After-Free Vulnerability | Feb 15, 2022 | Aug 15, 2022 | The impacted product is end-of-life and should be disconnected if still in use. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| adobe flash player | <= 31.0.0.153 |
CPE
Remediation
| |
| apple mac os x | All versions |
CPE
Remediation
| |
| linux linux kernel | All versions |
CPE
Remediation
| |
| microsoft windows | All versions |
CPE
Remediation
| |
| google chrome os | All versions |
CPE
Remediation
| |
| microsoft windows 10 | All versions |
CPE
Remediation
| |
| microsoft windows 8.1 | All versions |
CPE
Remediation
| |
| redhat enterprise linux desktop | 6.0 |
CPE
Remediation
| |
| redhat enterprise linux server | 6.0 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 6.0 |
CPE
Remediation
| |
| adobe flash player installer | <= 31.0.0.108 |
CPE
Remediation
| |
Change History
16 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 17, 2025 | Modified Analysis | [email protected] |
| Nov 16, 2025 | CVE Modified | CISA-ADP |
| Oct 23, 2025 | Modified Analysis | [email protected] |
| Oct 22, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Feb 13, 2025 | Modified Analysis | [email protected] |
| Feb 4, 2025 | CVE Modified | CISA-ADP |
| Jan 23, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 29, 2019 | Initial Analysis | [email protected] |
| Jan 19, 2019 | CVE Modified | [email protected] |