FP
Product
Flash Player Desktop Runtime
On CISA KEVExploited in the wildRansomware-linked
294
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 260Medium 16Low 0
Watch
Add Flash Player Desktop Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1030 | 8.1 | Apr 9 | Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access… Affected: through 21.0.0.197 |
| CVE-2016-1006 | 8.1 | Apr 9 | Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection… Affected: through 21.0.0.197 |
| CVE-2019-8075 | 7.5 | Sep 27 | Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability Affected: through 32.0.0.207 |
| CVE-2019-7108 | 7.5 | May 23 | Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability Affected: through 32.0.0.156 |
| CVE-2018-15978 | 7.5 | Nov 29 | Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability Affected: through 31.0.0.122 |
| CVE-2018-15967 | 7.5 | Sep 25 | Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability Affected: through 31.0.0.108 |
| CVE-2018-5008 | 7.5 | Jul 20 | Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability Affected: through 30.0.0.113 |
| CVE-2016-4232 | 7.5 | Jul 13 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information… Affected: through 22.0.0.192 |
| CVE-2017-3085 | 7.4 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect Affected: through 26.0.0.137 |
| CVE-2016-1014 | 7.3 | Apr 9 | Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Affected: through 21.0.0.197 |