{"id":"CVE-2018-15982","title":"Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability","summary":"Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416","CWE-416"],"vendor":"adobe","product":"flash_player","affected":["flash_player <= 31.0.0.153","enterprise_linux_desktop = 6.0","enterprise_linux_server = 6.0","enterprise_linux_workstation = 6.0","flash_player_installer <= 31.0.0.108"],"published":"2019-01-18","updated":"2026-08-13","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","references":[{"url":"http://www.securityfocus.com/bid/106116","label":"psirt@adobe.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:3795","label":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb18-42.html","label":"psirt@adobe.com"},{"url":"https://www.exploit-db.com/exploits/46051/","label":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/106116","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3795","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb18-42.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/46051/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/cisagov/vulnrichment/issues/195","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.89146,"epssPercentile":0.99778,"kev":true,"kevDateAdded":"2022-02-15","kevDueDate":"2022-08-15","kevRansomware":true,"exploited":true,"exploitAvailable":true,"zeroDay":true,"ingestedAt":"2026-08-13T06:00:54.601Z","exploits":{"exploitdb":true,"github":7,"githubRepos":["https://github.com/FlatL1neAPT/CVE-2018-15982","https://github.com/Ormicron/CVE-2018-15982_PoC","https://github.com/Ridter/CVE-2018-15982_EXP"],"checkedAt":"2026-09-21T15:23:39.505Z"},"slug":"CVE-2018-15982","body":"## Overview\n\nFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.\n\n## Affected\n\n- `flash_player <= 31.0.0.153`\n- `enterprise_linux_desktop = 6.0`\n- `enterprise_linux_server = 6.0`\n- `enterprise_linux_workstation = 6.0`\n- `flash_player_installer <= 31.0.0.108`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":91,"depthScoreParts":{"impact":42.9,"likelihood":17.8,"exploitation":25,"ransomware":5},"changes":[{"seq":201385,"id":"CVE-2018-15982","ts":1789399326091,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":200128,"id":"CVE-2018-15982","ts":1789396490262,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":196922,"id":"CVE-2018-15982","ts":1789384204040,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":195851,"id":"CVE-2018-15982","ts":1789383056488,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":194777,"id":"CVE-2018-15982","ts":1789380175087,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":193567,"id":"CVE-2018-15982","ts":1789377877648,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":192351,"id":"CVE-2018-15982","ts":1789376083582,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":191141,"id":"CVE-2018-15982","ts":1789372723979,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":189923,"id":"CVE-2018-15982","ts":1789369017069,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":188713,"id":"CVE-2018-15982","ts":1789367718524,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":187493,"id":"CVE-2018-15982","ts":1789364864213,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":186283,"id":"CVE-2018-15982","ts":1789362648092,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":185066,"id":"CVE-2018-15982","ts":1789360840718,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":183856,"id":"CVE-2018-15982","ts":1789357556080,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":182108,"id":"CVE-2018-15982","ts":1789353980458,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":180901,"id":"CVE-2018-15982","ts":1789352633267,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":179694,"id":"CVE-2018-15982","ts":1789349814164,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":178487,"id":"CVE-2018-15982","ts":1789347419634,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":177280,"id":"CVE-2018-15982","ts":1789346037624,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":176073,"id":"CVE-2018-15982","ts":1789342426363,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":175859,"id":"CVE-2018-15982","ts":1789342048631,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":175397,"id":"CVE-2018-15982","ts":1789337989560,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":174192,"id":"CVE-2018-15982","ts":1789334469729,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":173006,"id":"CVE-2018-15982","ts":1789332995142,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":171820,"id":"CVE-2018-15982","ts":1789330799295,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":170615,"id":"CVE-2018-15982","ts":1789328045204,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":169410,"id":"CVE-2018-15982","ts":1789326740852,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":168205,"id":"CVE-2018-15982","ts":1789323074184,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":167000,"id":"CVE-2018-15982","ts":1789319214306,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":165795,"id":"CVE-2018-15982","ts":1789317850953,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":164590,"id":"CVE-2018-15982","ts":1789315404167,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":163385,"id":"CVE-2018-15982","ts":1789312961624,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":162180,"id":"CVE-2018-15982","ts":1789311587596,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":160975,"id":"CVE-2018-15982","ts":1789307948692,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":160941,"id":"CVE-2018-15982","ts":1789307711789,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":160293,"id":"CVE-2018-15982","ts":1789303714425,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":159354,"id":"CVE-2018-15982","ts":1789300256493,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":158318,"id":"CVE-2018-15982","ts":1789298979975,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":157282,"id":"CVE-2018-15982","ts":1789296346001,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":156077,"id":"CVE-2018-15982","ts":1789294065440,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":154872,"id":"CVE-2018-15982","ts":1789292480555,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":153667,"id":"CVE-2018-15982","ts":1789289001576,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":152879,"id":"CVE-2018-15982","ts":1789284843275,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":152123,"id":"CVE-2018-15982","ts":1789280593906,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":151084,"id":"CVE-2018-15982","ts":1789277295100,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":150051,"id":"CVE-2018-15982","ts":1789275544799,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":149018,"id":"CVE-2018-15982","ts":1789273491291,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":147813,"id":"CVE-2018-15982","ts":1789270507362,"field":"epss","old":"0.89146","new":"0.81971"},{"seq":145853,"id":"CVE-2018-15982","ts":1789269075860,"field":"epss","old":"0.81971","new":"0.89146"},{"seq":144757,"id":"CVE-2018-15982","ts":1789265829833,"field":"epss","old":"0.89146","new":"0.81971"}]}