CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2018-5002
High (7.8) in Adobe Flash Player. In CISA KEV since 2022-05-23. EPSS 24% chance of exploitation in the next 30 days.
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Severity
- EPSS
- 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-05-23, due 2022-06-13
- CWEs
- CWE-787, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:flash_player
- adobe:flash_player_desktop_runtime
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation