Adobe Flash Player vulnerabilities
1,081 known vulnerabilities affecting adobe/flash_player.
Total CVEs
1,081
CISA KEV
36
actively exploited
Public exploits
183
Exploited in wild
46
Severity breakdown
CRITICAL607HIGH369MEDIUM104LOW1
Vulnerabilities
Page 5 of 55
CVE-2017-3001HIGHCVSS 8.8≤ 24.0.0.2212017-03-14
CVE-2017-3001 [HIGH] CWE-416 CVE-2017-3001: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3002HIGHCVSS 8.8≤ 24.0.0.2212017-03-14
CVE-2017-3002 [HIGH] CWE-416 CVE-2017-3002: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2999HIGHCVSS 8.8≤ 24.0.0.2212017-03-14
CVE-2017-2999 [HIGH] CWE-787 CVE-2017-2999: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3000MEDIUMCVSS 6.5≤ 24.0.0.2212017-03-14
CVE-2017-3000 [MEDIUM] CVE-2017-3000: Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generat
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.
nvd
CVE-2017-2994HIGHCVSS 8.8≤ 24.0.0.2212017-02-15
CVE-2017-2994 [HIGH] CWE-416 CVE-2017-2994: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2987HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2987 [HIGH] CWE-190 CVE-2017-2987: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerabilit
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2985HIGHCVSS 8.8PoC≤ 24.0.0.1942017-02-15
CVE-2017-2985 [HIGH] CWE-416 CVE-2017-2985: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2986HIGHCVSS 8.8PoC≤ 24.0.0.1942017-02-15
CVE-2017-2986 [HIGH] CWE-787 CVE-2017-2986: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability i
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2995HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2995 [HIGH] CWE-843 CVE-2017-2995: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2993HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2993 [HIGH] CWE-416 CVE-2017-2993: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2988HIGHCVSS 8.8PoC≤ 24.0.0.1942017-02-15
CVE-2017-2988 [HIGH] CWE-787 CVE-2017-2988: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2982HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2982 [HIGH] CWE-416 CVE-2017-2982: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2992HIGHCVSS 8.8PoC≤ 24.0.0.1942017-02-15
CVE-2017-2992 [HIGH] CWE-787 CVE-2017-2992: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability w
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2984HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2984 [HIGH] CWE-787 CVE-2017-2984: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability i
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2991HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2991 [HIGH] CWE-787 CVE-2017-2991: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2996HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2996 [HIGH] CWE-787 CVE-2017-2996: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2990HIGHCVSS 8.8≤ 24.0.0.1942017-02-15
CVE-2017-2990 [HIGH] CWE-787 CVE-2017-2990: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2931HIGHCVSS 8.8PoC≤ 24.0.0.1862017-01-11
CVE-2017-2931 [HIGH] CWE-787 CVE-2017-2931: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerabili
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadata. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2935HIGHCVSS 8.8PoC≤ 24.0.0.1862017-01-11
CVE-2017-2935 [HIGH] CWE-787 CVE-2017-2935: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability w
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2933HIGHCVSS 8.8PoC≤ 24.0.0.1862017-01-11
CVE-2017-2933 [HIGH] CWE-787 CVE-2017-2933: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability r
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution.
nvd