Adobe Flash vulnerabilities and fixes

CVEs that mention Adobe Flash, ranked by priority. 97 tracked.

Adobe Flash has 97 tracked vulnerabilities, 31 critical and 4 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 97. Most recent: 2020-10-14. Highest priority: CVE-2018-15982 (score 92/100).

• CVE-2018-15982 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Adobe Flash Player Use-After-Free Vulnerability
• CVE-2018-4878 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Adobe Flash Player Use-After-Free Vulnerability
• CVE-2017-11292 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Adobe Flash Player Type Confusion Vulnerability
• CVE-2018-5002 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Adobe Flash Player Stack-based Buffer Overflow Vulnerability
• CVE-2017-11281 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function
• CVE-2017-11282 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser
• CVE-2017-3061 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3076 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3077 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3078 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-11213 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
• CVE-2017-11215 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
• CVE-2017-11225 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
• CVE-2017-3112 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
• CVE-2017-3114 CRITICAL 9.8 MITIGATE MITIGATE An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions
• CVE-2018-12825 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability
• CVE-2018-12828 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability
• CVE-2018-15981 CRITICAL 9.8 UPGRADE UPGRADE Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability
• CVE-2018-4877 CRITICAL 9.8 UPGRADE MITIGATE A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161
• CVE-2018-4944 CRITICAL 9.8 UPGRADE MITIGATE Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability
• CVE-2016-0959 CRITICAL 9.8 UPGRADE UPGRADE Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Exten
• CVE-2018-12827 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability
• CVE-2017-3068 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3106 HIGH 8.8 MITIGATE MITIGATE Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsi
• CVE-2017-3059 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the int
• CVE-2017-3060 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3062 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionS
• CVE-2017-3063 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the Act
• CVE-2017-3075 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manip
• CVE-2017-3079 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3081 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during int
• CVE-2017-3082 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3083 CRITICAL 9.8 UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Pri
• CVE-2017-3084 CRITICAL 9.8 UPGRADE Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the adv
• CVE-2019-7096 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an
• CVE-2019-8070 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vuln
• CVE-2020-9633 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and
• CVE-2019-8069 CRITICAL 9.8 UPGRADE UPGRADE Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method
• CVE-2017-2985 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the Act
• CVE-2017-2986 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flas
• CVE-2017-2988 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when pe
• CVE-2017-2992 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsin
• CVE-2018-12826 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability
• CVE-2018-15967 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability
• CVE-2018-15978 HIGH 7.5 UPGRADE UPGRADE Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability
• CVE-2018-4935 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability
• CVE-2018-4937 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability
• CVE-2018-5007 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability
• CVE-2018-5008 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability
• CVE-2019-7837 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a
• CVE-2020-3757 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0
• CVE-2017-3069 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3070 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3071 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when maski
• CVE-2017-3072 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3073 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handl
• CVE-2017-3074 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3085 HIGH 7.4 UPGRADE UPGRADE Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to informat
• CVE-2018-4871 HIGH 7.5 MITIGATE MITIGATE An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137
• CVE-2018-4945 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability
• CVE-2019-7845 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an
• CVE-2019-8075 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability
• CVE-2017-3064 HIGH 7.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when pa
• CVE-2017-2984 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264
• CVE-2017-2987 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related
• CVE-2017-2990 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-2991 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-3099 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2018-12824 MEDIUM 5.9 UPGRADE UPGRADE Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability
• CVE-2017-2982 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routi
• CVE-2017-2993 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to
• CVE-2017-2994 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primeti
• CVE-2017-2995 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to
• CVE-2017-2996 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Prim
• CVE-2017-2997 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerabili
• CVE-2017-3001 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to
• CVE-2017-3002 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the Act
• CVE-2017-3003 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to
• CVE-2018-4919 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability
• CVE-2018-4920 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability
• CVE-2018-4932 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability
• CVE-2017-2998 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2017-2999 HIGH 8.8 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2019-7108 HIGH 7.5 UPGRADE UPGRADE Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an
• CVE-2018-4934 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability
• CVE-2018-4936 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability
• CVE-2018-5000 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability
• CVE-2018-5001 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability
• CVE-2017-3058 HIGH 7.8 UPGRADE UPGRADE Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sou
• CVE-2017-11305 MEDIUM 6.5 UPGRADE UPGRADE A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended rese
• CVE-2018-15983 HIGH 7.8 UPGRADE UPGRADE Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll
• CVE-2020-9746 HIGH 7.0 UPGRADE UPGRADE Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vu
• CVE-2017-3000 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used fo
• CVE-2019-7090 MEDIUM 6.5 UPGRADE UPGRADE Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.1
• CVE-2017-3080 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash A
• CVE-2017-3100 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the
• CVE-2018-4933 MEDIUM 6.5 UPGRADE UPGRADE Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability

FAQ

How do I fix Adobe Flash vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Adobe Flash being exploited right now?

Yes: 4 Adobe Flash CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Adobe Flash CVE should I patch first?

CVE-2018-15982 currently ranks highest (92/100): Adobe Flash Player Use-After-Free Vulnerability.

RSS feed for Adobe Flash · ← Back to latest CVEs