CVE-2019-7108

flashplugin-downloader: Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of...

CVE-2019-7108 is fixed in 2 products on 1 platform, first by flashplugin-downloader 32.0.0.171ubuntu0.18.04.1, released May 23, 2019. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0319
88th percentile

Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Where it's fixed

ProductFixed inFixReleased
Linux
flashplugin-downloader · Ubuntu 18.04.6 LTS (bionic) 32.0.0.171ubuntu0.18.04.1 flashplugin-downloader 32.0.0.171ubuntu0.18.04.1 May 23, 2019
flashplugin-installer · Ubuntu 18.04.6 LTS (bionic) 32.0.0.171ubuntu0.18.04.1 flashplugin-installer 32.0.0.171ubuntu0.18.04.1 May 23, 2019