Login Request a demo
FP
Product
Flash Player
by Adobe · last CVE Oct 14, 2020
On CISA KEVExploited in the wildRansomware-linked
1,084
CVEs
36
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities1,084In the news0Timeline
Severity mix
Critical 50High 352Medium 18Low 0
Severity
All severities500Critical50High352Medium18Low0
Exploitation
On CISA KEV36Exploited in the wild36
Watch

Add Flash Player to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4171
In wildKEV
9.8
20%
Jun 16
Adobe Flash Player Remote Code Execution Vulnerability
Affected: through 11.2.202.621; through 21.0.0.242; through 21.0.0.242; through 21.0.0.242; through 18.0.0.352; through 21.0.0.242; +1 more
CVE-2016-4117
RansomwareIn wildKEV
9.8
94%
May 11
Adobe Flash Player Arbitrary Code Execution Vulnerability
Affected: through 21.0.0.226
CVE-2016-1019
RansomwareIn wildKEV
9.8
22%
Apr 7
Adobe Flash Player Arbitrary Code Execution Vulnerability
Affected: through 18.0.0.333; through 21.0.0.197; through 21.0.0.197; through 21.0.0.197; through 11.2.202.577
CVE-2015-5123
In wildKEV
9.8
19%
Jul 14
Adobe Flash Player Use-After-Free Vulnerability
Affected: 11.0 through 11.2.202.481; 13.0 through 13.0.0.302; 18.0 through 18.0.0.203
CVE-2015-5122
In wildKEV
9.8
87%
Jul 14
Adobe Flash Player Use-After-Free Vulnerability
Affected: 13.0 through 13.0.0.302; 18.0 through 18.0.0.203; 18.0 through 18.0.0.204; 18.0 through 18.0.0.203; 18.0 through 18.0.0.203; 11.0 through 11.2.202.481
CVE-2015-5119
In wildKEV
9.8
99%
Jul 8
Adobe Flash Player Use-After-Free Vulnerability
Affected: 13.0.0.182 through 13.0.0296; 14.0.0.125 through 18.0.0.194; through 11.2.202.468
CVE-2015-3113
In wildKEV
9.8
100%
Jun 23
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Affected: before 13.0.0.296; 14.0.0.125 before 18.0.0.194; before 11.2.202.468
CVE-2015-3043
In wildKEV
9.8
74%
Apr 14
Adobe Flash Player Memory Corruption Vulnerability
Affected: before 11.2.202.457; before 13.0.0.281; 14.0.0.125 before 17.0.0.169
CVE-2015-0313
In wildKEV
9.8
95%
Feb 2
Adobe Flash Player Use-After-Free Vulnerability
Affected: before 11.2.202.442; before 13.0.0.269; 14.0.0.125 before 16.0.0.305
CVE-2015-0311
In wildKEV
9.8
86%
Jan 23
Adobe Flash Player Remote Code Execution Vulnerability
Affected: through 11.2.202.438; through 13.0.0.262; 14.0.0.125 before 16.0.0.287
CVE-2014-0497
In wildKEV
9.8
100%
Feb 5
Adobe Flash Player Integer Underflow Vulnerablity
Affected: before 11.2.202.336; before 11.7.700.261; 11.8.800.94 before 12.0.0.44
CVE-2015-8459
10.0
6%
Dec 28
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before…
Affected: through 11.2.202.554; through 18.0.0.268; 19.0.0.185; 19.0.0.207; 19.0.0.226; 19.0.0.245; +2 more
CVE-2020-9633
9.8
8%
Jun 12
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet…
Affected: through 32.0.0.371; through 32.0.0.330; through 32.0.0.330
CVE-2019-8070
9.8
6%
Sep 12
Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability
Affected: through 32.0.0.238; through 32.0.0.207; through 32.0.0.207
CVE-2019-8069
9.8
4%
Sep 12
Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability
Affected: through 32.0.0.238; through 32.0.0.207; through 32.0.0.207
CVE-2019-7096
9.8
6%
May 23
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability
Affected: through 32.0.0.156; through 32.0.0.156; through 32.0.0.156
CVE-2018-15981
9.8
12%
Nov 29
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability
Affected: through 31.0.0.148; through 31.0.0.148; through 31.0.0.148
CVE-2018-12828
9.8
7%
Aug 29
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability
Affected: through 30.0.0.154; through 30.0.0.154; through 30.0.0.154; through 30.0.0.154
CVE-2018-12825
9.8
7%
Aug 29
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability
Affected: through 30.0.0.154; through 30.0.0.154; through 30.0.0.154; through 30.0.0.154
CVE-2018-4944
9.8
8%
May 19
Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability
Affected: through 29.0.0.140; through 29.0.0.140; through 29.0.0.140; through 29.0.0.140
CVE-2018-4877
9.8
8%
Feb 6
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161
Affected: before 28.0.0.161; before 28.0.0.161; before 28.0.0.161; before 28.0.0.161
CVE-2017-3114
9.8
6%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-3112
9.8
6%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-11225
9.8
6%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-11215
9.8
6%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-11213
9.8
7%
Dec 9
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
Affected: through 27.0.0.183; through 27.0.0.183; through 27.0.0.183; through 27.0.0.183
CVE-2017-11282
9.8
34%
Dec 1
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser
Affected: through 26.0.0.151; through 26.0.0.151; through 26.0.0.151; through 26.0.0.151
CVE-2017-11281
9.8
34%
Dec 1
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function
Affected: through 26.0.0.151; through 26.0.0.151; through 26.0.0.151; through 26.0.0.151
CVE-2016-0959
9.8
5%
Jun 27
Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google…
Affected: through 20.0.0.235; through 20.0.0.228; through 20.0.0.228; through 20.0.0.228; through 20.0.0.228
CVE-2017-3084
9.8
9%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality
Affected: through 25.0.0.171
CVE-2017-3083
9.8
14%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media…
Affected: through 25.0.0.171
CVE-2017-3082
9.8
12%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3081
9.8
14%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask…
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3079
9.8
7%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3078
9.8
31%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3077
9.8
22%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3076
9.8
25%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3075
9.8
9%
Jun 20
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class
Affected: through 25.0.0.171; through 25.0.0.171; through 25.0.0.171; through 25.0.0.171
CVE-2017-3063
9.8
9%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3062
9.8
10%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3061
9.8
25%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3060
9.8
8%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2017-3059
9.8
10%
Apr 12
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object
Affected: through 25.0.0.127; through 25.0.0.127; through 25.0.0.127; through 25.0.0.127
CVE-2016-4163
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4162
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4161
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4160
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4138
9.8
25%
Jun 16
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has…
Affected: through 21.0.0.242; through 21.0.0.242; through 21.0.0.242; through 11.2.202.621; through 18.0.0.352
CVE-2016-4121
9.8
10%
Jun 16
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
CVE-2016-4120
9.8
6%
Jun 16
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
Affected: through 21.0.0.241; through 21.0.0.241; through 18.0.0.343; through 11.2.202.616; through 21.0.0.216
Showing 50
The 500 most important CVEs for this product (exploited first, then by severity)