FP
Product
Flash Player
On CISA KEVExploited in the wildRansomware-linked
1,084
CVEs
36
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 50High 352Medium 18Low 0
Watch
Add Flash Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1096 | 7.5 | May 11 | Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has… Affected: through 21.0.0.213 |
| CVE-2017-3085 | 7.4 | Aug 11 | Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect Affected: through 26.0.0.137; through 26.0.0.137; through 26.0.0.137 |
| CVE-2016-1014 | 7.3 | Apr 9 | Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows… Affected: through 11.2.202.577; through 18.0.0.333; through 21.0.0.197; through 21.0.0.197; through 21.0.0.197 |
| CVE-2019-7090 | 6.5 | May 24 | Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet… Affected: through 32.0.0.114; through 32.0.0.114; through 32.0.0.114 |
| CVE-2018-5001 | 6.5 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability Affected: through 29.0.0.171; through 29.0.0.171; through 29.0.0.171 |
| CVE-2018-5000 | 6.5 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability Affected: through 29.0.0.171; through 29.0.0.171; through 29.0.0.171 |
| CVE-2018-4936 | 6.5 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2018-4934 | 6.5 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2018-4933 | 6.5 | May 19 | Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability Affected: through 29.0.0.113; through 29.0.0.113; through 29.0.0.113 |
| CVE-2017-11305 | 6.5 | Dec 13 | A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser… Affected: through 27.0.0.187; through 27.0.0.187; through 27.0.0.187 |
| CVE-2017-3100 | 6.5 | Jul 17 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class Affected: through 26.0.0.120; through 26.0.0.120; through 26.0.0.131 |
| CVE-2017-3080 | 6.5 | Jul 17 | Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer Affected: through 26.0.0.120; through 26.0.0.120; through 26.0.0.131 |
| CVE-2017-3000 | 6.5 | Mar 14 | Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding Affected: through 24.0.0.221; through 24.0.0.221; through 24.0.0.221 |
| CVE-2017-2938 | 6.5 | Jan 11 | Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections Affected: through 24.0.0.186; through 24.0.0.186; through 24.0.0.186; through 24.0.0.186 |
| CVE-2016-4278 | 6.5 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 11.2.202.632; through 22.0.0.211; through 22.0.0.211; through 18.0.0.366; through 22.0.0.211 |
| CVE-2016-4277 | 6.5 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 11.2.202.632; through 22.0.0.211; through 22.0.0.211; through 18.0.0.366; through 22.0.0.211 |
| CVE-2016-4271 | 6.5 | Sep 14 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access… Affected: through 11.2.202.632; through 22.0.0.211; through 22.0.0.211; through 18.0.0.366; through 22.0.0.211 |
| CVE-2018-12824 | 5.9 | Aug 29 | Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability Affected: through 30.0.0.154; through 30.0.0.154; through 30.0.0.154 |
| CVE-2016-4247 | 5.3 | Jul 13 | Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain… Affected: through 18.0.0.360; through 22.0.0.192; through 22.0.0.192; through 22.0.0.192; through 11.2.202.626 |
| CVE-2016-4178 | 4.3 | Jul 13 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access… Affected: through 18.0.0.360; through 22.0.0.192; through 22.0.0.192; through 22.0.0.192; through 11.2.202.626 |
| CVE-2015-8457 | – | Dec 10 | Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8456 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8455 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8454 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8453 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8452 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8451 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8450 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8449 | – | Dec 10 | Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8448 | – | Dec 10 | Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8447 | – | Dec 10 | Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8446 | – | Dec 10 | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8445 | – | Dec 10 | Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8444 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8443 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8442 | – | Dec 10 | Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8441 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8440 | – | Dec 10 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8439 | – | Dec 10 | The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8438 | – | Dec 10 | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8437 | – | Dec 10 | Use-after-free vulnerability in the Selection object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8436 | – | Dec 10 | Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8435 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8434 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8433 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8432 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8431 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8430 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
| CVE-2015-8429 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; through 11.2.202.548 |
| CVE-2015-8428 | – | Dec 10 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before… Affected: through 11.2.202.548; through 18.0.0.261; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245 |
The 500 most important CVEs for this product (exploited first, then by severity)