FP
Product
Flash Player
On CISA KEVExploited in the wildRansomware-linked
1,084
CVEs
36
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 50High 352Medium 18Low 0
Watch
Add Flash Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11292 In wildKEV | 8.8 | Oct 21 | Adobe Flash Player Type Confusion Vulnerability Affected: through 27.0.0.130; through 27.0.0.130; through 27.0.0.159 |
| CVE-2016-7892 In wildKEV | 8.8 | Dec 15 | Adobe Flash Player Use-After-Free Vulnerability Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7855 In wildKEV | 8.8 | Nov 1 | Adobe Flash Player Use-After-Free Vulnerability Affected: through 23.0.0.185; through 23.0.0.185; through 23.0.0.185; through 11.2.202.637; through 23.0.0.185 |
| CVE-2016-1010 In wildKEV | 8.8 | Mar 12 | Adobe Flash Player and AIR Integer Overflow Vulnerability Affected: through 20.0.0.306; through 11.2.202.569; through 20.0.0.306; through 20.0.0.306 |
| CVE-2016-0984 In wildKEV | 8.8 | Feb 10 | Adobe Flash Player and AIR Use-After-Free Vulnerability Affected: through 20.0.0.272; through 20.0.0.272; through 11.2.202.559; through 18.0.0.326; through 20.0.0.286 |
| CVE-2015-8651 In wildKEV | 8.8 | Dec 28 | Adobe Flash Player Integer Overflow Vulnerability Affected: before 11.2.202.559; before 18.0.0.324; 19.0.0.185 before 20.0.0.267 |
| CVE-2014-8439 In wildKEV | 8.8 | Nov 25 | Adobe Flash Player Dereferenced Pointer Vulnerability Affected: through 11.2.202.418; through 15.0.0.223; through 13.0.0.252 |
| CVE-2014-0502 In wildKEV | 8.8 | Feb 21 | Adobe Flash Player Double Free Vulnerablity Affected: before 11.7.700.269; 11.8.800.94 before 12.0.0.70; before 11.2.202.341 |
| CVE-2013-0648 In wildKEV | 8.8 | Feb 27 | Adobe Flash Player Code Execution Vulnerability Affected: before 10.3.183.67; 11.0 before 11.6.602.171; 11.0 before 11.2.202.273 |
| CVE-2013-0643 In wildKEV | 8.8 | Feb 27 | Adobe Flash Player Incorrect Default Permissions Vulnerability Affected: before 10.3.183.67; 11.0 before 11.6.602.171; 11.0 before 11.2.202.273 |
| CVE-2012-5054 In wildKEV | 8.8 | Sep 24 | Adobe Flash Player Integer Overflow Vulnerability Affected: before 11.4.402.265 |
| CVE-2011-0611 In wildKEV | 8.8 | Apr 13 | Adobe Flash Player Remote Code Execution Vulnerability Affected: before 10.2.154.27; through 10.2.156.12 |
| CVE-2012-0754 In wildKEV | 8.1 | Feb 16 | Adobe Flash Player Memory Corruption Vulnerability Affected: before 10.3.183.15; 11.0 before 11.1.102.62; before 11.1.111.6; before 11.1.115.6 |
| CVE-2018-15982 RansomwareIn wildKEV | 7.8 | Jan 18 | Adobe Flash Player Use-After-Free Vulnerability Affected: through 31.0.0.153; through 31.0.0.153; through 31.0.0.153; through 31.0.0.153 |
| CVE-2018-5002 In wildKEV | 7.8 | Jul 9 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Affected: through 29.0.0.171; through 29.0.0.171; through 29.0.0.171 |
| CVE-2018-4878 RansomwareIn wildKEV | 7.8 | Feb 6 | Adobe Flash Player Use-After-Free Vulnerability Affected: before 28.0.0.161; before 28.0.0.161; before 28.0.0.161; before 28.0.0.161 |
| CVE-2015-7645 RansomwareIn wildKEV | 7.8 | Oct 15 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 18.0.0.160 through 18.0.0.252; 19.0.0.185; 19.0.0.207; through 11.2.202.535 |
| CVE-2015-0310 In wildKEV | 7.8 | Jan 23 | Adobe Flash Player ASLR Bypass Vulnerability Affected: before 11.2.202.438; before 13.0.0.262; 14.0 before 16.0.0.287 |
| CVE-2014-9163 In wildKEV | 7.8 | Dec 10 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Affected: 13.0 before 13.0.0.259; 14.0 through 14.0.0.179; 15.0 before 15.0.0.246; 11.0 before 11.2.202.425 |
| CVE-2012-1535 In wildKEV | 7.8 | Aug 15 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: before 11.3.300.271; before 11.2.202.238 |
| CVE-2011-0609 In wildKEV | 7.8 | Mar 15 | Adobe Flash Player Unspecified Vulnerability Affected: through 10.2.154.13; through 10.1.106.16 |
| CVE-2010-1297 In wildKEV | 7.8 | Jun 8 | Adobe Flash Player Memory Corruption Vulnerability Affected: before 9.0.277.0; 10.0 before 10.1.53.64 |
| CVE-2009-1862 In wildKEV | 7.8 | Jul 23 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Affected: 9.0 through 9.0.159.0; 10.0 through 10.0.22.87 |
| CVE-2012-2034 In wildKEV | 7.5 | Jun 9 | Adobe Flash Player Memory Corruption Vulnerability Affected: through 11.2.202.235; through 11.1.115.8; through 11.1.111.9 |
| CVE-2020-9746 | 8.8 | Oct 14 | Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution Affected: through 32.0.0.433; before 32.0.0.433; before 32.0.0.387; before 32.0.0.387 |
| CVE-2020-3757 | 8.8 | Feb 13 | Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability Affected: before 32.0.0.321; before 32.0.0.314; through 32.0.0.321; through 32.0.0.255; through 32.0.0.255 |
| CVE-2019-7845 | 8.8 | Jun 12 | Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability Affected: through 32.0.0.192; through 32.0.0.192; through 32.0.0.192; through 32.0.0.192 |
| CVE-2019-7837 | 8.8 | May 22 | Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability Affected: through 32.0.0.171; through 32.0.0.171; through 32.0.0.171 |
| CVE-2018-5007 | 8.8 | Jul 20 | Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability Affected: through 30.0.0.113; through 30.0.0.113; through 30.0.0.113 |
| CVE-2018-4945 | 8.8 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability Affected: through 29.0.0.171; through 29.0.0.171; through 29.0.0.171 |
| CVE-2018-4937 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2018-4935 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2018-4932 | 8.8 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2018-4920 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability Affected: through 28.0.0.161; through 28.0.0.161; through 28.0.0.161 |
| CVE-2018-4919 | 8.8 | May 19 | Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability Affected: through 28.0.0.161; through 28.0.0.161; through 28.0.0.161 |
| CVE-2017-3106 | 8.8 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files Affected: through 26.0.0.137; through 26.0.0.137; through 26.0.0.137 |
| CVE-2017-3099 | 8.8 | Jul 17 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model Affected: through 26.0.0.120; through 26.0.0.120; through 26.0.0.131 |
| CVE-2017-3074 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3073 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory… Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3072 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3071 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3070 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3069 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3068 | 8.8 | May 9 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148 |
| CVE-2017-3003 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the… Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-3002 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-3001 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2999 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2998 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2997 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
The 500 most important CVEs for this product (exploited first, then by severity)
