CVE-2020-9633
published 2020-06-12CVE-2020-9633: Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft…
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
7.56%
93.8th percentile
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_flash_player | — | — |
| adobe | flash_player | <= 32.0.0.371 | — |
| adobe | flash_player | <= 32.0.0.330 | — |
| adobe | flash_player_desktop_runtime | <= 32.0.0.371 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hfp4-4377-7cc7: Adobe Flash Player versions 32
ghsa_unreviewed·2022-05-24
CVE-2020-9633 [HIGH] CWE-416 GHSA-hfp4-4377-7cc7: Adobe Flash Player versions 32
Adobe Flash Player versions 32.0.0.371 and earlier, 32.0.0.371 and earlier, and 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
OSV
CVE-2020-9633: Adobe Flash Player Desktop Runtime 32
osv·2020-06-12·CVSS 9.8
CVE-2020-9633 [CRITICAL] CVE-2020-9633: Adobe Flash Player Desktop Runtime 32
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Red Hat
flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)
vendor_redhat·2020-06-09·CVSS 9.8
CVE-2020-9633 [CRITICAL] CWE-416 flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)
flash-plugin: Arbitrary Code Execution vulnerability (APSB20-30)
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
A use-after-free flaw was found in the Adobe Flash Player. This flaw an attacker to perform arbitrary code execution when the Flash player is used to play a specially crafted SWF file. The highest threat from this vulnerability is to confidentiality, integrity and system availability.
No detection rules found.
No public exploits indexed.
2020-06-12
Published