CVE-2018-15982
Adobe Flash Player Use-After-Free Vulnerability
CVSS
7.8
High
EPSS
89.6%
p100
KEV
YES
Feb 15, 2022
Exploit Today
80
0-100
Published: Jan 18, 2019 · Last modified: Oct 1, 2026 · CWE-416
89.1%EPSS · 30 days89.6%
2026-09-172026-10-15
Product
Adobe / Flash Player
Vulnerability
Adobe Flash Player Use-After-Free Vulnerability
Added to KEV
Feb 15, 2022
Remediate by
Aug 15, 2022
Known ransomware use
Yes
Summary description
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-15982
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- www.securityfocus.comhttp://www.securityfocus.com/bid/106116
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2018:3795
- helpx.adobe.comhttps://helpx.adobe.com/security/products/flash-player/apsb18-42.html
- www.exploit-db.comhttps://www.exploit-db.com/exploits/46051/
- www.securityfocus.comhttp://www.securityfocus.com/bid/106116
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2018:3795
- helpx.adobe.comhttps://helpx.adobe.com/security/products/flash-player/apsb18-42.html
- www.exploit-db.comhttps://www.exploit-db.com/exploits/46051/
- github.comhttps://github.com/cisagov/vulnrichment/issues/195
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-15982
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1109228.8 HIG—
———Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)10hCVE-2026-1109218.8 HIG—
———Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-1109198.8 HIG—
———Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)10hCVE-2026-1109158.8 HIG—
———Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)10hCVE-2026-1084468.8 HIG—
———Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.11hCVE-2026-1084428.8 HIG—
———Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.11h