Security Bypass Vulnerability in Adobe Flash Player by Adobe
CVE-2018-12825

9.8CRITICAL

Key Information:

Vendor
Adobe
Status
Adobe Flash Player 30.0.0.134 And Earlier
Vendor
CVE Published:
29 August 2018

Summary

Adobe Flash Player versions 30.0.0.134 and earlier are impacted by a security bypass vulnerability that could allow attackers to bypass existing security mitigations. This flaw may provide an avenue for further exploitation, thereby compromising the security of systems utilizing vulnerable versions of Adobe Flash Player. Users are advised to update to the latest version to protect against potential threats. For more detailed information, refer to Adobe’s security advisory and relevant resources.

Affected Version(s)

Adobe Flash Player 30.0.0.134 and earlier Adobe Flash Player 30.0.0.134 and earlier

References

https://access.redhat.com/errata/RHSA-2018:2435
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/105070
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1041448
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.