Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20055 · Published 2016-06-16 · Fixed
Priority CRITICAL 100KEV
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94271 · Published 2016-05-11 · Fixed
Priority CRITICAL 100KEV
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22316 · Published 2016-04-07 · Fixed
Priority CRITICAL 100KEV
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1883 · Published 2015-07-14 · Fixed CWE-416
Priority CRITICAL 100KEV
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x thro…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87033 · Published 2015-07-14 · Fixed CWE-416
Priority CRITICAL 100KEV
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 o…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98618 · Published 2015-07-08 · Fixed CWE-416
Priority CRITICAL 100KEV
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99812 · Published 2015-06-23 · Fixed CWE-122
Priority CRITICAL 100KEV
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.73862 · Published 2015-04-14 · Fixed CWE-787
Priority CRITICAL 100KEV
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.95341 · Published 2015-02-02 · No fix listed CWE-416
Priority CRITICAL 100KEV
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via u…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.85589 · Published 2015-01-23 · Fixed
Priority CRITICAL 100KEV
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unsp…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99879 · Published 2014-02-05 · Fixed CWE-191
Priority CRITICAL 97KEV
Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11214 · Published 2017-10-21 · Fixed CWE-843
Priority CRITICAL 97KEV
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.19078 · Published 2016-12-15 · Partial fix CWE-416
Priority CRITICAL 97KEV
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wil…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.25198 · Published 2016-11-01 · Fixed CWE-416
Priority CRITICAL 97KEV
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Ado…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.19333 · Published 2016-03-12 · Fixed CWE-190
Priority CRITICAL 97KEV
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.54544 · Published 2016-02-10 · Fixed CWE-416
Priority CRITICAL 97KEV
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.67698 · Published 2015-12-28 · Fixed CWE-190
Priority CRITICAL 97KEV
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler be…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.20369 · Published 2014-11-25 · Fixed CWE-416
Priority CRITICAL 97KEV
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR S…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.24817 · Published 2014-02-21 · Fixed CWE-415
Priority CRITICAL 97KEV
Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11094 · Published 2013-02-27 · Fixed
Priority CRITICAL 97KEV
The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, whic…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.10533 · Published 2013-02-27 · Fixed CWE-269
Priority CRITICAL 97KEV
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.21194 · Published 2012-09-24 · Fixed CWE-190
Priority CRITICAL 97KEV
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.9941 · Published 2011-04-13 · Fixed CWE-843
Priority CRITICAL 94KEV
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbit…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.91187 · Published 2012-02-16 · Fixed CWE-787
Priority CRITICAL 93KEV
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.89581 · Published 2019-01-18 · Fixed CWE-416
Load more