CyberSec.Space Logo
Back to CVE Browser

CVE-2018-5002

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score62.1540%
EPSS Percentile95.37th
PublishedJul 9, 2018
Last ModifiedNov 18, 2025

Vulnerability Description

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Platforms (CPE)

📦
Adobe

Flash Player Desktop Runtime

<= 29.0.0.171
📦
Adobe

Flash Player

<= 29.0.0.171
📦
Adobe

Flash Player

<= 29.0.0.171
📦
Adobe

Flash Player

<= 29.0.0.171
💻
Redhat

Enterprise Linux Desktop

= 6.0
💻
Redhat

Enterprise Linux Server

= 6.0
💻
Redhat

Enterprise Linux Workstation

= 6.0

References & Advisories

🔗 http://www.securityfocus.com/bid/104412
🔗 http://www.securitytracker.com/id/1041058
🔗 https://access.redhat.com/errata/RHSA-2018:1827
🔗 https://helpx.adobe.com/security/products/flash-player/apsb18-19.html
🔗 https://security.gentoo.org/glsa/201806-02
🔗 http://www.securityfocus.com/bid/104412
🔗 http://www.securitytracker.com/id/1041058
🔗 https://access.redhat.com/errata/RHSA-2018:1827

Related Vulnerabilities

CVE-2020-96339.8

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe ...

CVE-2016-09599.8

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release ...

CVE-2019-70906.5

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...