Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

flash player vulnerabilities and fixes

Recent CVEs affecting flash player, with upgrade or downgrade steps. 1074 tracked.

Also searched as: flashplayer.

flash player has 1074 tracked vulnerabilities, 49 critical and 35 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1057. Most recent: 2020-10-14. Highest priority: CVE-2016-4117 (score 100/100).

FAQ

How do I fix flash player vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is flash player being exploited right now?

Yes: 35 flash player CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which flash player CVE should I patch first?

CVE-2016-4117 currently ranks highest (100/100): Adobe Flash Player Arbitrary Code Execution Vulnerability.

RSS feed for flash player · ← Back to latest CVEs