CVE-2018-4944

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-704

Affected software

Vendor	Product	Versions
n/a	Adobe Flash Player 29.0.0.140 and earlier versions	Adobe Flash Player 29.0.0.140 and earlier versions

References

http://www.securityfocus.com/bid/104101Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040840Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1367Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb18-16.htmlVendor Advisory
https://security.gentoo.org/glsa/201806-02Third Party Advisory
http://www.securityfocus.com/bid/104101Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040840Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:1367Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb18-16.htmlVendor Advisory
https://security.gentoo.org/glsa/201806-02Third Party Advisory

Timeline

Published: May 19, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-49458.8Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code CVE-2018-49468.8Adobe Photoshop CC versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier have an Out-of-bounds write vulnerability. Succes CVE-2018-49479.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo CVE-2018-49489.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflo CVE-2018-49497.5Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun CVE-2018-49509.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun CVE-2018-49516.5Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun CVE-2018-49528.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr CVE-2018-49538.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusi CVE-2018-49548.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-fr CVE-2018-49557.5Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun CVE-2018-49567.5Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-boun