CVE-2018-12825 Security feature bypass in Adobe Flash Player 30.0.0.134 and earlier
Attackers can bypass security mitigations in Adobe Flash Player, potentially enabling further exploitation of the browser environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-12825?
CVE-2018-12825 is a critical vulnerability in Adobe Flash Player, published on 29 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
Which versions are affected by CVE-2018-12825?
It affects 4 products.
Products include Adobe Flash Player, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2018-12825?
Upgrade to a fixed version.
Is CVE-2018-12825 being exploited?
There is no known exploitation of CVE-2018-12825 in the wild and no public exploit code.
Other vulnerabilities in Adobe Flash Player
Sources
Also known as GHSA-fwmp-493q-9xqx, UBUNTU-CVE-2018-12825.