Adobe Flash Player vulnerabilities

1,081 known vulnerabilities affecting adobe/flash_player.

Total CVEs

1,081

CISA KEV

actively exploited

Public exploits

183

Exploited in wild

Severity breakdown

CRITICAL606HIGH370MEDIUM104LOW1

Vulnerabilities

SortPage 25 of 55

CVE-2015-0342P3CRITICALCVSS 10.0≤ 11.2.202.442≤ 13.0.0.264+15 more2015-03-13

CVE-2015-0342 [CRITICAL] CVE-2015-0342: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.

nvd

CVE-2013-0647P3CRITICALCVSS 10.0≥ 10.3, < 10.3.183.63≥ 11.6, < 11.6.602.168+5 more2013-02-12

CVE-2013-0647 [CRITICAL] CVE-2013-0647: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 an Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers

nvd

CVE-2013-0638P3CRITICALCVSS 10.0≥ 10.3, < 10.3.183.63≥ 11.6, < 11.6.602.168+5 more2013-02-12

CVE-2013-0638 [CRITICAL] CWE-119 CVE-2013-0638: Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 an Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow at

nvd

CVE-2012-5279P3CRITICALCVSS 10.0≥ 10.3, < 10.3.183.43≥ 11.4, < 11.5.502.110+3 more2012-11-07

CVE-2012-5279 [CRITICAL] CWE-119 CVE-2012-5279: Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 1 Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a den

nvd

CVE-2013-0650P3CRITICALCVSS 10.0≤ 11.6.602.171v11.0+45 more2013-03-13

CVE-2013-0650 [CRITICAL] CWE-399 CVE-2013-0650: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 o Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compi

nvd

CVE-2015-5579P3CRITICALCVSS 10.0≤ 11.2.202.508≤ 13.0.0.289+24 more2015-09-22

CVE-2015-5579 [CRITICAL] CVE-2015-5579: Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2. Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a differen

nvd

CVE-2015-0331P3CRITICALCVSS 10.0≤ 13.0.0.264v14.0.0.125+14 more2015-02-21

CVE-2015-0331 [CRITICAL] CVE-2015-0331: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

nvd

CVE-2014-0588P3CRITICALCVSS 10.0≥ 13.0, < 13.0.0.252≥ 14.0, ≤ 14.0.0.179+2 more2014-11-11

CVE-2014-0588 [CRITICAL] CVE-2014-0588: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerabili

nvd

CVE-2015-0332P3CRITICALCVSS 10.0≤ 13.0.0.264v14.0.0.125+15 more2015-03-13

CVE-2015-0332 [CRITICAL] CVE-2015-0332: Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0333, CVE-2015-0335, and CVE-2015-0339.

nvd

CVE-2015-5570P3CRITICALCVSS 10.0≤ 13.0.0.289v14.0.0.125+24 more2015-09-22

CVE-2015-5570 [CRITICAL] CVE-2015-5570: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on W Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than C

nvd

CVE-2012-5252P3CRITICALCVSS 10.0≤ 10.3.183.25v10.1.85.3+37 more2012-10-09

CVE-2012-5252 [CRITICAL] CWE-119 CVE-2012-5252: Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 1 Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a d

nvd

CVE-2015-3103P3CRITICALCVSS 10.0≤ 13.0.0.289v14.0.0.125+17 more2015-06-10

CVE-2015-3103 [CRITICAL] CVE-2015-3103: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0

nvd

CVE-2010-2181P3CRITICALCVSS 9.3v9.0.16v9.0.20+53 more2010-06-15

CVE-2010-2181 [CRITICAL] CVE-2010-2181: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR be Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.

nvd

CVE-2010-2170P3CRITICALCVSS 9.3v9.0.16v9.0.20+53 more2010-06-15

CVE-2010-2170 [CRITICAL] CWE-189 CVE-2010-2170: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR be Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.

nvd

CVE-2010-2183P3CRITICALCVSS 9.3v9.0.16v9.0.20+53 more2010-06-15

CVE-2010-2183 [CRITICAL] CVE-2010-2183: Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR be Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.

nvd

CVE-2017-2991P3HIGHCVSS 8.8≤ 24.0.0.1942017-02-15

CVE-2017-2991 [HIGH] CWE-787 CVE-2017-2991: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerabili Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.

nvd

CVE-2017-11215P3CRITICALCVSS 9.8≤ 27.0.0.1832017-12-09

CVE-2017-11215 [CRITICAL] CWE-416 CVE-2017-11215: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information

nvd

CVE-2017-11225P3CRITICALCVSS 9.8≤ 27.0.0.1832017-12-09

CVE-2017-11225 [CRITICAL] CWE-416 CVE-2017-11225: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hi

nvd

CVE-2015-0335P3CRITICALCVSS 10.0≤ 13.0.0.264v14.0.0.125+15 more2015-03-13

CVE-2015-0335 [CRITICAL] CVE-2015-0335: Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0339.

nvd

CVE-2012-5270P3CRITICALCVSS 10.0≤ 10.3.183.25v10.1.85.3+37 more2012-10-09

CVE-2012-5270 [CRITICAL] CWE-119 CVE-2012-5270: Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 1 Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a d

nvd

← Previous25 / 55Next →