CVE-2018-15982

CVE-2018-15982 is a critical use-after-free vulnerability affecting Adobe Flash Player versions 31.0.0.153 and earlier, impacting a wide range of operating systems including Windows, macOS, and Linux. This vulnerability carries a high CVSS score of 7.8, indicating a severe risk where an unauthenticated attacker could achieve arbitrary code execution with user interaction, leading to full compromise of the affected system. The vulnerability is actively exploited in the wild, with evidence of its use in ransomware campaigns like Maze and by exploit kits such as Fallout and Spelevo, demonstrating its high attractiveness to attackers. While no Metasploit or Nuclei modules exist, a Proof-of-Concept exploit is publicly available on ExploitDB, and it has garnered significant community discussion and media coverage.