Candidate: CVE-2018-15983 PublicDate: 2019-01-18 17:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15983 https://helpx.adobe.com/security/products/flash-player/apsb18-42.html Description: Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation. Ubuntu-Description: Notes: Bugs: Priority: negligible Discovered-by: Assigned-to: chriscoulson CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH] Patches_flashplugin-nonfree: upstream_flashplugin-nonfree: released (32.0.0.101) precise/esm_flashplugin-nonfree: DNE trusty_flashplugin-nonfree: released (32.0.0.101ubuntu0.14.04.1) trusty/esm_flashplugin-nonfree: DNE (trusty was needs-triage) xenial_flashplugin-nonfree: released (32.0.0.101ubuntu0.16.04.1) bionic_flashplugin-nonfree: released (32.0.0.101ubuntu0.18.04.1) cosmic_flashplugin-nonfree: released (32.0.0.101ubuntu0.18.10.1) disco_flashplugin-nonfree: released (32.0.0.101ubuntu1) devel_flashplugin-nonfree: released (32.0.0.101ubuntu1) Patches_adobe-flashplugin: upstream_adobe-flashplugin: released (32.0.0.101) precise/esm_adobe-flashplugin: DNE trusty_adobe-flashplugin: released (1:20181205.1-0ubuntu0.14.04.1) trusty/esm_adobe-flashplugin: DNE (trusty was needs-triage) xenial_adobe-flashplugin: released (1:20181205.1-0ubuntu0.16.04.1) bionic_adobe-flashplugin: released (1:20181205.1-0ubuntu0.18.04.1) cosmic_adobe-flashplugin: released (1:20181205.1-0ubuntu0.18.10.1) disco_adobe-flashplugin: released (1:20181205.1-0ubuntu1) devel_adobe-flashplugin: released (1:20181205.1-0ubuntu1)