CVE-2018-11529
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 41%
from disclosure to weapon97 days
Published on NVDJul 11
1st PoC+97d
metasploitMay 24
exploitation probability
41%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result in denial of service conditions.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45626cve_referencewww.exploit-db.com/exploits/45626/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.