Actively exploited in the wild
Adobe Flash Player Use-After-Free Vulnerability
Adobe - Flash Player · Listed in the CISA KEV since 2022-02-15. This indicates confirmed attacks in production environments.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2018-15982
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, potentially leading to system compromise or data theft.
Recommendation
Update Flash Player to the latest available version or remove Flash Player entirely, as it is being deprecated.
Original NVD description (English source)
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.