CVE-2018-15983
Publication date 18 January 2019
Last updated 25 August 2025
Ubuntu priority
Description
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| adobe-flashplugin | ||
| 18.04 LTS bionic |
Fixed 1:20181205.1-0ubuntu0.18.04.1
|
|
| 16.04 LTS xenial |
Fixed 1:20181205.1-0ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 1:20181205.1-0ubuntu0.14.04.1
|
|
| flashplugin-nonfree | ||
| 18.04 LTS bionic |
Fixed 32.0.0.101ubuntu0.18.04.1
|
|
| 16.04 LTS xenial |
Fixed 32.0.0.101ubuntu0.16.04.1
|
|
| 14.04 LTS trusty |
Fixed 32.0.0.101ubuntu0.14.04.1
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
7.8 · High
|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |