CVE-2018-15982Published

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Collected exploitation and prediction evidence

CISA KEV is observed exploitation evidence. FIRST EPSS is a dated prediction of exploitation in the next 30 days. Missing scores are unknown. This collector requests predictions only for explicit CVE aliases in the public NuGet archive; Microsoft release views retain their existing prediction scope.

CVE-2018-15982

CISA KEV listing collected · added 15 Feb 2022 · Adobe · Flash Player

Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability

CISA source · CISA-cited reference

EPSS unknown / outside the collected prediction scope.

Observed 23 Oct 2026 16:01:26 UTC · Complete immutable risk JSON

cve-program · CVE-2018-15982

Published

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Source published: 18 Jan 2019 17:00:00 UTC
Source modified: 1 Oct 2026 20:29:13 UTC
Observed here: 23 Oct 2026 15:48:27 UTC
Source terms: CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: cve-program · CVE Program Terms of Use. Source text is retained; field grouping and change labels are provided by ChangeIntel.