First published: Fri Jan 18 2019(Updated: )
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Flash Player | <=31.0.0.153 | |
Apple Mac OS X | ||
Linux Linux kernel | ||
Microsoft Windows | ||
Adobe Flash Player | <=31.0.0.153 | |
Google Chrome OS | ||
Adobe Flash Player | <=31.0.0.153 | |
Adobe Flash Player | <=31.0.0.153 | |
Microsoft Windows 10 | ||
Microsoft Windows 8.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Flash Player vulnerability is CVE-2018-15983.
The severity of CVE-2018-15983 is high with a score of 7.8.
Flash Player versions 31.0.0.153 and earlier, as well as 31.0.0.108 and earlier, are affected by CVE-2018-15983.
Successful exploitation of CVE-2018-15983 could lead to privilege escalation.
To fix CVE-2018-15983, update Flash Player to version 32.0.0.192 or later, as mentioned in the Adobe security advisory APSB18-42.