CVE-2018-15967 Information disclosure in Flash Player
An attacker can exploit a privilege escalation flaw in Adobe Flash Player to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-15967?
CVE-2018-15967 is a high-severity vulnerability in Adobe Flash Player, published on 25 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure.
Weakness: CWE-200
Which versions are affected by CVE-2018-15967?
It affects 5 products.
Linux distribution packages (1)
flash-plugin Red Hat:rhel_extras:6 | All versions | 0:31.0.0.108-1.el6_10 |
Products include Adobe Flash Player, Adobe Flash Player Desktop Runtime, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2018-15967?
Apply the vendor's patch.
Is CVE-2018-15967 being exploited?
There is no known exploitation of CVE-2018-15967 in the wild and no public exploit code.
Other vulnerabilities in Adobe Flash Player
Sources
Also known as GHSA-5fr3-pj37-r3jj, MGASA-2018-0372, RHSA-2018:2707.