Insecure Library Loading Vulnerability in Flash Player by Adobe
CVE-2018-15983

7.8HIGH

Key Information:

Vendor
Adobe
Status
Flash Player
Vendor
CVE Published:
18 January 2019

Summary

Adobe Flash Player versions 31.0.0.153 and earlier, as well as 31.0.0.108 and earlier, contain an insecure library loading vulnerability that can lead to the potential for privilege escalation. This flaw allows attackers to exploit the library loading process, which could enable unauthorized access and control over affected systems.

References

https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/106108
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.