CVE-2018-4878
High 7.8 Exploited in the wild (KEV) Used in ransomware campaigns
Confirmed active exploitation — CISA KEV catalog
- Name
- Adobe Flash Player Use-After-Free Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
Description
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 90% (percentile: 100) as of 1 November 2026
- CWE
- CWE-416
Affected products
adobe: flash player; apple: macos; linux: linux kernel; microsoft: windows; redhat: enterprise linux desktop; redhat: enterprise linux server; redhat: enterprise linux workstation; microsoft: windows 10; microsoft: windows 8.1; google: chrome os
References
- https://helpx.adobe.com/security/products/flash-player/apsb18-03.html Vendor Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb18-03.html Vendor Advisory
- https://securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-pr… ExploitThird Party Advisory
- https://www.exploit-db.com/exploits/44412/ ExploitThird Party AdvisoryVDB Entry
- https://securingtomorrow.mcafee.com/mcafee-labs/hackers-bypassed-adobe-flash-pr… ExploitThird Party Advisory
- https://www.exploit-db.com/exploits/44412/ ExploitThird Party AdvisoryVDB Entry
- http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Technical DescriptionThird Party Advisory
- http://www.securityfocus.com/bid/102893 Broken Link
- http://www.securitytracker.com/id/1040318 Broken Link
- https://access.redhat.com/errata/RHSA-2018:0285 Third Party Advisory