FP
Product
Flash Player Desktop Runtime
On CISA KEVExploited in the wildRansomware-linked
294
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 260Medium 16Low 0
Watch
Add Flash Player Desktop Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11292 In wildKEV | 8.8 | Oct 21 | Adobe Flash Player Type Confusion Vulnerability Affected: through 27.0.0.159 |
| CVE-2016-7892 In wildKEV | 8.8 | Dec 15 | Adobe Flash Player Use-After-Free Vulnerability Affected: through 23.0.0.207 |
| CVE-2016-1010 In wildKEV | 8.8 | Mar 12 | Adobe Flash Player and AIR Integer Overflow Vulnerability Affected: through 20.2.2.306 |
| CVE-2016-0984 In wildKEV | 8.8 | Feb 10 | Adobe Flash Player and AIR Use-After-Free Vulnerability Affected: through 20.0.0.286 |
| CVE-2018-5002 In wildKEV | 7.8 | Jul 9 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Affected: through 29.0.0.171 |
| CVE-2019-7837 | 8.8 | May 22 | Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability Affected: through 32.0.0.171 |
| CVE-2018-5007 | 8.8 | Jul 20 | Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability Affected: through 30.0.0.113 |
| CVE-2018-4945 | 8.8 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability Affected: through 29.0.0.171 |
| CVE-2018-4937 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4935 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4932 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability Affected: through 29.0.0.113 |
| CVE-2018-4920 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability Affected: through 28.0.0.161 |
| CVE-2018-4919 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability Affected: through 28.0.0.161 |
| CVE-2017-3106 | 8.8 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files Affected: through 26.0.0.137 |
| CVE-2017-3099 | 8.8 | Jul 17 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model Affected: through 26.0.0.131 |
| CVE-2017-3074 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3073 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory… Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3072 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3071 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3070 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3069 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3068 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine Affected: through 25.0.0.163; through 25.0.0.148 |
| CVE-2017-3003 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the… Affected: through 24.0.0.221 |
| CVE-2017-3002 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property Affected: through 24.0.0.221 |
| CVE-2017-3001 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM Affected: through 24.0.0.221 |
| CVE-2017-2999 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface Affected: through 24.0.0.221 |
| CVE-2017-2998 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions Affected: through 24.0.0.221 |
| CVE-2017-2997 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information Affected: through 24.0.0.221 |
| CVE-2017-2996 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK Affected: through 24.0.0.194 |
| CVE-2017-2995 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class Affected: through 24.0.0.194 |
| CVE-2017-2994 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch Affected: through 24.0.0.221 |
| CVE-2017-2993 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers Affected: through 24.0.0.194 |
| CVE-2017-2992 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header Affected: through 24.0.0.194 |
| CVE-2017-2991 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression) Affected: through 24.0.0.194 |
| CVE-2017-2990 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine Affected: through 24.0.0.194 |
| CVE-2017-2988 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection Affected: through 24.0.0.194 |
| CVE-2017-2987 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM Affected: through 24.0.0.194 |
| CVE-2017-2986 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec Affected: through 24.0.0.194 |
| CVE-2017-2985 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class Affected: through 24.0.0.194 |
| CVE-2017-2984 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine Affected: through 24.0.0.194 |
| CVE-2017-2982 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown Affected: through 24.0.0.194 |
| CVE-2016-7890 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy Affected: through 23.0.0.207 |
| CVE-2016-7881 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an… Affected: through 23.0.0.207 |
| CVE-2016-7880 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object Affected: through 23.0.0.207 |
| CVE-2016-7879 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached… Affected: through 23.0.0.207 |
| CVE-2016-7878 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class Affected: through 23.0.0.207 |
| CVE-2016-7877 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0) Affected: through 23.0.0.207 |
| CVE-2016-7876 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling… Affected: through 23.0.0.207 |
| CVE-2016-7875 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class Affected: through 23.0.0.207 |
| CVE-2016-7874 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy… Affected: through 23.0.0.207 |