FP
Product
Flash Player Desktop Runtime
On CISA KEVExploited in the wildRansomware-linked
294
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 260Medium 16Low 0
Watch
Add Flash Player Desktop Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1019 RansomwareIn wildKEV | 9.8 | Apr 7 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: through 21.0.0.197 |
| CVE-2015-5123 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 18.0 through 18.0.0.203 |
| CVE-2015-5122 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 18.0 through 18.0.0.203 |
| CVE-2017-11292 In wildKEV | 8.8 | Oct 21 | Adobe Flash Player Type Confusion Vulnerability Affected: through 27.0.0.159 |
| CVE-2016-7892 In wildKEV | 8.8 | Dec 15 | Adobe Flash Player Use-After-Free Vulnerability Affected: through 23.0.0.207 |
| CVE-2016-1010 In wildKEV | 8.8 | Mar 12 | Adobe Flash Player and AIR Integer Overflow Vulnerability Affected: through 20.2.2.306 |
| CVE-2016-0984 In wildKEV | 8.8 | Feb 10 | Adobe Flash Player and AIR Use-After-Free Vulnerability Affected: through 20.0.0.286 |
| CVE-2018-5002 In wildKEV | 7.8 | Jul 9 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Affected: through 29.0.0.171 |
| CVE-2020-9633 | 9.8 | Jun 12 | Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet… Affected: through 32.0.0.371 |
| CVE-2019-8070 | 9.8 | Sep 12 | Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability Affected: through 32.0.0.238 |
| CVE-2019-8069 | 9.8 | Sep 12 | Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability Affected: through 32.0.0.238 |
| CVE-2019-7096 | 9.8 | May 23 | Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability Affected: through 32.0.0.156 |
| CVE-2018-15981 | 9.8 | Nov 29 | Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability Affected: through 31.0.0.148 |
| CVE-2016-4163 | 9.8 | Jun 16 | Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or… Affected: through 21.0.0.226 |
| CVE-2016-4162 | 9.8 | Jun 16 | Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or… Affected: through 21.0.0.226 |
| CVE-2016-4161 | 9.8 | Jun 16 | Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or… Affected: through 21.0.0.226 |
| CVE-2016-4160 | 9.8 | Jun 16 | Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or… Affected: through 21.0.0.226 |
| CVE-2016-4138 | 9.8 | Jun 16 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: through 21.0.0.242 |
| CVE-2016-4121 | 9.8 | Jun 16 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers… Affected: through 21.0.0.226 |
| CVE-2016-4120 | 9.8 | Jun 16 | Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or… Affected: through 21.0.0.226 |
| CVE-2019-7837 | 8.8 | May 22 | Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability Affected: through 32.0.0.171 |
| CVE-2018-5007 | 8.8 | Jul 20 | Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability Affected: through 30.0.0.113 |
| CVE-2018-4945 | 8.8 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability Affected: through 29.0.0.171 |
| CVE-2018-4937 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4935 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4932 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4920 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability Affected: through 28.0.0.161 |
| CVE-2018-4919 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability Affected: through 28.0.0.161 |
| CVE-2017-3106 | 8.8 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files Affected: through 26.0.0.137 |
| CVE-2017-3099 | 8.8 | Jul 17 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model Affected: through 26.0.0.131 |
| CVE-2017-3074 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3073 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory… Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3072 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3071 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3070 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3069 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3068 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3003 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the… Affected: through 24.0.0.221 |
| CVE-2017-3002 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property Affected: through 24.0.0.221 |
| CVE-2017-3001 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM Affected: through 24.0.0.221 |
| CVE-2017-2999 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface Affected: through 24.0.0.221 |
| CVE-2017-2998 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions Affected: through 24.0.0.221 |
| CVE-2017-2997 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information Affected: through 24.0.0.221 |
| CVE-2017-2996 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK Affected: through 24.0.0.194 |
| CVE-2017-2995 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class Affected: through 24.0.0.194 |
| CVE-2017-2994 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch Affected: through 24.0.0.221 |
| CVE-2017-2993 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers Affected: through 24.0.0.194 |
| CVE-2017-2992 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header Affected: through 24.0.0.194 |
| CVE-2017-2991 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression) Affected: through 24.0.0.194 |
| CVE-2017-2990 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine Affected: through 24.0.0.194 |