CVE-2018-5002: high-severity vulnerability in Adobe Flash Player 29.0.0.171 and earlier…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
The impacted product is end-of-life and should be disconnected if still in use.
Adobe Flash Player has a flaw where too much data can overflow a memory buffer on the stack, potentially allowing an attacker to run malicious code on your computer with your user's permissions.
Stack-based buffer overflow in Adobe Flash Player ≤29.0.0.171 allows remote code execution in user context through malformed input; exploitation requires user interaction (typically media playback) and results in arbitrary code execution with current user privileges.
The full analysis of this CVE is available in Portuguese →