Skip to content

Product

Adobe flash player desktop runtime vulnerabilities

294 published CVES affecting Adobe flash player desktop runtime, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
294
Critical
15
High
263
Medium
16
Low
0
Unscored
0
CISA KEV
8

Latest Adobe flash player desktop runtime CVEs

Newest publication first · page 1 of 12

  1. CriticalCVSS 9.8 EPSS 7.7%

    Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead...

  2. CriticalCVSS 9.8 EPSS 4.3%

    Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

  3. MediumCVSS 6.5 EPSS 4.8%

    Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploita...

  4. HighCVSS 7.8 EPSS 24.4% CISA KEV added 2022-05-23 Exploited in the wild

    Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.