Flash Player Desktop Runtime vulnerabilities | LiveThreat CVE Feed

Product

Flash Player Desktop Runtime

by Adobe · last CVE Jun 12, 2020

On CISA KEVExploited in the wildRansomware-linked

294

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities294 In the news0 Timeline

Severity mix

Critical 15High 260Medium 16Low 0

Severity

All severities294 Critical15 High260 Medium16 Low0

Exploitation

On CISA KEV8 Exploited in the wild8

Watch

Add Flash Player Desktop Runtime to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-0978	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0977	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0976	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0975	8.8	5%	Feb 10	Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on… Affected: through 20.0.0.286
CVE-2016-0974	8.8	31%	Feb 10	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before… Affected: through 20.0.0.286
CVE-2016-0973	8.8	5%	Feb 10	Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before… Affected: through 20.0.0.286
CVE-2016-0972	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0971	8.8	33%	Feb 10	Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before… Affected: through 20.0.0.286
CVE-2016-0970	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0969	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0968	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0967	8.8	20%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0966	8.8	4%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0965	8.8	20%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-0964	8.8	20%	Feb 10	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before… Affected: through 20.0.0.286
CVE-2016-1030	8.1	5%	Apr 9	Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access… Affected: through 21.0.0.197
CVE-2016-1006	8.1	4%	Apr 9	Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection… Affected: through 21.0.0.197
CVE-2019-8075	7.5	3%	Sep 27	Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability Affected: through 32.0.0.207
CVE-2019-7108	7.5	3%	May 23	Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability Affected: through 32.0.0.156
CVE-2018-15978	7.5	7%	Nov 29	Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability Affected: through 31.0.0.122
CVE-2018-15967	7.5	7%	Sep 25	Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability Affected: through 31.0.0.108
CVE-2018-5008	7.5	7%	Jul 20	Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability Affected: through 30.0.0.113
CVE-2016-4232	7.5	36%	Jul 13	Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information… Affected: through 22.0.0.192
CVE-2017-3085	7.4	4%	Aug 11	Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect Affected: through 26.0.0.137
CVE-2016-1014	7.3	1%	Apr 9	Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Affected: through 21.0.0.197
CVE-2019-7090	6.5	5%	May 24	Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet… Affected: through 32.0.0.114
CVE-2018-5001	6.5	13%	Jul 9	Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability Affected: through 29.0.0.171
CVE-2018-5000	6.5	14%	Jul 9	Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability Affected: through 29.0.0.171
CVE-2018-4936	6.5	25%	May 19	Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability Affected: through 29.0.0.113
CVE-2018-4934	6.5	20%	May 19	Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability Affected: through 29.0.0.113
CVE-2018-4933	6.5	4%	May 19	Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability Affected: through 29.0.0.113
CVE-2017-11305	6.5	4%	Dec 13	A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser… Affected: through 27.0.0.187
CVE-2017-3100	6.5	4%	Jul 17	Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class Affected: through 26.0.0.131
CVE-2017-3080	6.5	4%	Jul 17	Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer Affected: through 26.0.0.131
CVE-2017-3000	6.5	8%	Mar 14	Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding Affected: through 24.0.0.221
CVE-2016-4278	6.5	4%	Sep 14	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 22.0.0.211
CVE-2016-4277	6.5	4%	Sep 14	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 22.0.0.211
CVE-2016-4271	6.5	5%	Sep 14	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 22.0.0.211
CVE-2018-12824	5.9	11%	Aug 29	Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability Affected: through 30.0.0.154
CVE-2016-4247	5.3	3%	Jul 13	Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain… Affected: through 22.0.0.192
CVE-2016-4178	4.3	3%	Jul 13	Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access… Affected: through 22.0.0.192
CVE-2015-0312	–	7%	Jan 28	Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to… Affected: through 16.0.0.287
CVE-2014-0569	–	91%	Oct 15	Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293,… Affected: through 15.0.0.167
CVE-2014-0564	–	6%	Oct 15	Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before… Affected: through 15.0.0.167