CVE-2018-5007
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability....
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
- Record
CVE-2018-5007- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-704
- Updated
- 2026-11-02
CVE List No score
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
- Record
CVE-2018-5007- Updated
- 2026-11-02
EUVDEUVD-2018-16793 No score
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
- Record
EUVD-2018-16793- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r564-q8cj-xg77
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability....
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
- Record
GHSA-r564-q8cj-xg77- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-704
- Updated
- 2026-11-02
OSVRHSA-2018:2175
Red Hat Security Advisory: flash-plugin security update
- Record
RHSA-2018:2175- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0315 No score
Updated flash-player-plugin packages fix security vulnerabilities
Updated flash-player-plugin packages fix security vulnerabilities:
- A type confusion vulnerability that could lead to arbitrary code execution (CVE-2018-5007).
- An out of bounds read that could lead to information disclosure (CVE-2018-5008).
- Record
MGASA-2018-0315- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:6 From an advisory covering 2 CVEs |
before 30.0.0.134-1.mga6.nonfree | 30.0.0.134-1.mga6.nonfree |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:30.0.0.134-1.el6 | 0:30.0.0.134-1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-5007 is a high vulnerability (CVSS 8.8) in Adobe Flash Player, published July 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 17.8%, the 97th percentile. No source names a fixed version.
References
helpx.adobe.com/security/products/flash-player/apsb18-24.html
securitytracker.com/id/1041248
securityfocus.com/bid/104698
access.redhat.com/errata/RHSA-2018:2175
nvd.nist.gov/vuln/detail/CVE-2018-5007
github.com/advisories/GHSA-r564-q8cj-xg77
Show 11 moreShow less
advisories.mageia.org/MGASA-2018-0315.html
bugs.mageia.org/show_bug.cgi?id=23292
bugzilla.redhat.com/show_bug.cgi?id=1599810
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2175.json
cve.org/CVERecord?id=CVE-2018-5007