CVE-2018-4878
Adobe Flash Player Use-After-Free Vulnerability
CVSS
—
No CVSS
EPSS
89.5%
p100
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
89.5%EPSS · 30 days89.5%
2026-09-162026-10-14
Product
Adobe / Flash Player
Vulnerability
Adobe Flash Player Use-After-Free Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
Yes
Summary description
Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2018-4878
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-159827.8 HIG99.8%
KEV—80Adobe Flash Player Use-After-Free Vulnerability14dCVE-2016-41179.8 CRI99.9%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability36dCVE-2016-10199.8 CRI97.7%
KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability14dCVE-2014-0497—100.0%
KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—