FP
Product
Flash Player Desktop Runtime
On CISA KEVExploited in the wildRansomware-linked
294
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 260Medium 16Low 0
Watch
Add Flash Player Desktop Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2988 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection Affected: through 24.0.0.194 |
| CVE-2017-2987 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM Affected: through 24.0.0.194 |
| CVE-2017-2986 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec Affected: through 24.0.0.194 |
| CVE-2017-2985 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class Affected: through 24.0.0.194 |
| CVE-2017-2984 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine Affected: through 24.0.0.194 |
| CVE-2017-2982 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown Affected: through 24.0.0.194 |
| CVE-2016-7890 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy Affected: through 23.0.0.207 |
| CVE-2016-7881 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an… Affected: through 23.0.0.207 |
| CVE-2016-7880 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object Affected: through 23.0.0.207 |
| CVE-2016-7879 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached… Affected: through 23.0.0.207 |
| CVE-2016-7878 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class Affected: through 23.0.0.207 |
| CVE-2016-7877 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0) Affected: through 23.0.0.207 |
| CVE-2016-7876 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling… Affected: through 23.0.0.207 |
| CVE-2016-7875 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class Affected: through 23.0.0.207 |
| CVE-2016-7874 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy… Affected: through 23.0.0.207 |
| CVE-2016-7873 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy… Affected: through 23.0.0.207 |
| CVE-2016-7872 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple… Affected: through 23.0.0.207 |
| CVE-2016-7871 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class Affected: through 23.0.0.207 |
| CVE-2016-7870 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search… Affected: through 23.0.0.207 |
| CVE-2016-7869 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack… Affected: through 23.0.0.207 |
| CVE-2016-7868 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to… Affected: through 23.0.0.207 |
| CVE-2016-7867 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to… Affected: through 23.0.0.207 |
| CVE-2016-6992 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by… Affected: through 23.0.0.162 |
| CVE-2016-6990 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6989 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6987 | 8.8 | Oct 13 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers… Affected: through 23.0.0.162 |
| CVE-2016-6986 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6985 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6984 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6983 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6982 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-6981 | 8.8 | Oct 13 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers… Affected: through 23.0.0.162 |
| CVE-2016-4286 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access… Affected: through 23.0.0.162 |
| CVE-2016-4273 | 8.8 | Oct 13 | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or… Affected: through 23.0.0.162 |
| CVE-2016-7020 | 8.8 | Oct 5 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers… Affected: through 22.0.0.192 |
| CVE-2016-6932 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6931 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6930 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6929 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6927 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6926 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6925 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6924 | 8.8 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or… Affected: through 22.0.0.211 |
| CVE-2016-6923 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-6922 | 8.8 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or… Affected: through 22.0.0.211 |
| CVE-2016-6921 | 8.8 | Sep 14 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers… Affected: through 22.0.0.211 |
| CVE-2016-4287 | 8.8 | Sep 14 | Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute… Affected: through 22.0.0.211 |
| CVE-2016-4285 | 8.8 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or… Affected: through 22.0.0.211 |
| CVE-2016-4284 | 8.8 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or… Affected: through 22.0.0.211 |
| CVE-2016-4283 | 8.8 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or… Affected: through 22.0.0.211 |