Login Request a demo
FP
Product
Flash Player
by Adobe · last CVE Oct 14, 2020
On CISA KEVExploited in the wildRansomware-linked
1,084
CVEs
36
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities1,084In the news0Timeline
Severity mix
Critical 50High 352Medium 18Low 0
Severity
All severities500Critical50High352Medium18Low0
Exploitation
On CISA KEV36Exploited in the wild36
Watch

Add Flash Player to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-11213
9.8
7%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-11282
9.8
34%
Dec 1
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser
Affected: through 26.0.0.151; through 26.0.0.151; through 26.0.0.151; through 26.0.0.151
CVE-2017-11281
9.8
34%
Dec 1
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function
Affected: through 26.0.0.151; through 26.0.0.151; through 26.0.0.151; through 26.0.0.151
CVE-2016-0959
9.8
5%
Jun 27
Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google…
Affected: through 20.0.0.235; through 20.0.0.228; through 20.0.0.228; through 20.0.0.228; through 20.0.0.228
CVE-2017-3084
9.8
9%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality
Affected: through 25.0.0.171
CVE-2017-3083
9.8
14%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media…
Affected: through 25.0.0.171
CVE-2017-3082
9.8
12%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3081
9.8
14%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask…
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3079
9.8
7%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3078
9.8
31%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3077
9.8
22%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3076
9.8
25%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3075
9.8
9%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3063
9.8
9%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3062
9.8
10%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3061
9.8
25%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3060
9.8
8%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3059
9.8
10%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2016-4163
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4162
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4161
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4160
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4138
9.8
25%
Jun 16
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has…
Affected: through 21.0.0.242; through 21.0.0.242; through 21.0.0.242; through 11.2.202.621; through 18.0.0.352
CVE-2016-4121
9.8
10%
Jun 16
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4120
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2020-9746
8.8
4%
Oct 14
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution
Affected: through 32.0.0.433; before 32.0.0.433; before 32.0.0.387; before 32.0.0.387
CVE-2020-3757
8.8
10%
Feb 13
Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability
Affected: before 32.0.0.321; before 32.0.0.314; through 32.0.0.321; through 32.0.0.255; through 32.0.0.255
CVE-2019-7845
8.8
6%
Jun 12
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability
Affected: through 32.0.0.192; through 32.0.0.192; through 32.0.0.192; through 32.0.0.192
CVE-2019-7837
8.8
10%
May 22
Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability
Affected: through 32.0.0.171; through 32.0.0.171; through 32.0.0.171
CVE-2018-5007
8.8
18%
Jul 20
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability
Affected: through 30.0.0.113; through 30.0.0.113; through 30.0.0.113
CVE-2018-4945
8.8
7%
Jul 9
Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability
Affected: through 29.0.0.171; through 29.0.0.171; through 29.0.0.171
CVE-2018-4937
8.8
26%
May 19
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability
Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113
CVE-2018-4935
8.8
26%
May 19
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability
Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113
CVE-2018-4932
8.8
5%
May 19
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability
Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113
CVE-2018-4920
8.8
8%
May 19
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability
Affected: through 28.0.0.161; through 28.0.0.161; through 28.0.0.161
CVE-2018-4919
8.8
7%
May 19
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability
Affected: through 28.0.0.161; through 28.0.0.161; through 28.0.0.161
CVE-2017-3106
8.8
22%
Aug 11
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files
Affected: through 26.0.0.137; through 26.0.0.137; through 26.0.0.137
CVE-2017-3099
8.8
9%
Jul 17
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model
Affected: through 26.0.0.120; through 26.0.0.120; through 26.0.0.131
CVE-2017-3074
8.8
5%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3073
8.8
5%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory…
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3072
8.8
5%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3071
8.8
6%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3070
8.8
5%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3069
8.8
5%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3068
8.8
20%
May 9
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine
Affected: through 25.0.0.148; through 25.0.0.148; through 25.0.0.148
CVE-2017-3003
8.8
5%
Mar 14
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the…
Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221
CVE-2017-3002
8.8
5%
Mar 14
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property
Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221
CVE-2017-3001
8.8
5%
Mar 14
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM
Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221
CVE-2017-2999
8.8
4%
Mar 14
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface
Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221
CVE-2017-2998
8.8
4%
Mar 14
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions
Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221
Page 2 of 10 · 500 total
123…10
The 500 most important CVEs for this product (exploited first, then by severity)