vulnerability

Ubuntu: (CVE-2018-4920): flashplugin-nonfree vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

May 19, 2018

Added

Nov 19, 2024

Modified

Apr 16, 2026

Description

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Solutions

ubuntu-upgrade-adobe-flashpluginubuntu-upgrade-flashplugin-nonfree

References

CVE-2018-4920
https://attackerkb.com/topics/CVE-2018-4920
CWE-843
EUVD-EUVD-2018-16705
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-16705
https://helpx.adobe.com/security/products/flash-player/apsb18-05.html
https://www.cve.org/CVERecord?id=CVE-2018-4920

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report