FP
Product
Flash Player
On CISA KEVExploited in the wildRansomware-linked
1,084
CVEs
36
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 50High 352Medium 18Low 0
Watch
Add Flash Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2997 | 8.8 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2996 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2995 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2994 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2993 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2992 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2991 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression) Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2990 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2988 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2987 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2986 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2985 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2984 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2982 | 8.8 | Feb 15 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown Affected: through 24.0.0.194; through 24.0.0.194; through 24.0.0.194 |
| CVE-2017-2937 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2936 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2935 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2934 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2933 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2932 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2931 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2930 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2928 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2927 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2926 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2017-2925 | 8.8 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2016-7890 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7881 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7880 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7879 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7878 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7877 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0) Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7876 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7875 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7874 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7873 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7872 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7871 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7870 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7869 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7868 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7867 | 8.8 | Dec 15 | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to… Affected: through 23.0.0.207; through 23.0.0.207; through 23.0.0.207; through 11.2.202.644 |
| CVE-2016-7865 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7864 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7863 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7862 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7861 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7860 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7859 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
| CVE-2016-7858 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability Affected: through 23.0.0.205; through 23.0.0.205; through 23.0.0.205; through 23.0.0.205 |
The 500 most important CVEs for this product (exploited first, then by severity)