CVE Vulnerability Advisory Database

[Affected Scope] Adobe Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier

[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system via crafted malicious Flash content (SWF)

[Mitigation] Immediately update Adobe Flash Player to the patched version or completely uninstall Flash Player due to its End-of-Life (EOL) status

[Affected Scope] Adobe Flash Player versions 29.0.0.171 and earlier

[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted malicious SWF content

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall it, or upgrade to version 30.0.0.113 or later in legacy environments

[Affected Scope] Adobe Flash Player versions prior to 28.0.0.161 (specifically affecting Primetime SDK components)

[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by tricking them into opening crafted Flash content

[Mitigation] Upgrade Adobe Flash Player to version 28.0.0.161 or later, or completely uninstall/disable Flash Player across the enterprise

[Affected Scope] Adobe Flash Player version 27.0.0.159 and earlier

[Impact] Flawed bytecode verification allows untrusted values in array index calculations, leading to type confusion and arbitrary code execution

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall the software from all endpoints

[Affected Scope] Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier for Linux

[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system via memory corruption

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall the software from all systems

[Affected Scope] Adobe Flash Player before 23.0.0.205 on Windows and OS X, and before 11.2.202.643 on Linux

[Impact] Remote attackers can exploit memory corruption to execute arbitrary code with the privileges of the active user

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall the software or upgrade to the patched versions

[Affected Scope] Adobe Flash Player 21.0.0.242 and earlier versions across Windows, macOS, Linux, and ChromeOS

[Impact] Remote attackers can execute arbitrary code and gain full system control via specially crafted malicious Flash content (SWF)

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the only effective mitigation is to completely uninstall Flash Player from all systems

[Affected Scope] Adobe Flash Player 21.0.0.226 and earlier versions across Windows, macOS, Linux, and ChromeOS

[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and gain full system control via crafted malicious Flash content (SWF)

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended action is to completely uninstall it or disable Flash execution in all browsers and applications

[Affected Scope] Adobe Flash Player 21.0.0.197 and earlier versions

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via specially crafted Flash content

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), completely uninstall Flash Player from all systems and transition to modern web standards

[Affected Scope] Adobe Flash Player before 18.0.0.333, 19.x through 21.x before 21.0.0.182 on Windows/OS X, before 11.2.202.577 on Linux, and Adobe AIR/SDK before 21.0.0.176

[Impact] Successful exploitation allows remote attackers to trigger an integer overflow, leading to arbitrary code execution under the context of the current user

[Mitigation] Immediately uninstall legacy Adobe Flash Player and AIR components, or upgrade to patched versions if operating in isolated legacy environments

[Affected Scope] Adobe Flash Player before 18.0.0.329, 19.x and 20.x before 20.0.0.306 on Windows/OS X, before 11.2.202.569 on Linux, and Adobe AIR/SDK before 20.0.0.260.

[Impact] Successful exploitation allows remote attackers to execute arbitrary code and gain full control of the affected system via memory corruption.

[Mitigation] Immediately uninstall Adobe Flash Player from all endpoints as the product has reached End-of-Life (EOL), or upgrade legacy AIR components to secure versions.

[Affected Scope] Adobe Flash Player before 18.0.0.324, 19.x/20.x before 20.0.0.267 on Windows/OS X, before 11.2.202.559 on Linux, and Adobe AIR before 20.0.0.233

[Impact] Successful exploitation allows remote attackers to execute arbitrary code and compromise the host system via specially crafted Flash content (.swf)

[Mitigation] Immediately uninstall legacy Adobe Flash Player components or upgrade Adobe AIR to the latest secure version

[Affected Scope] Adobe Flash Player versions 18.x through 18.0.0.252, 19.x through 19.0.0.207 on Windows/OS X, and 11.x through 11.2.202.535 on Linux

[Impact] Successful exploitation allows remote attackers to execute arbitrary code and gain full control of the target system via a crafted malicious SWF file

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall it from all systems or disable the plugin in all browsers

[Affected Scope] Adobe Flash Player 13.x through 18.x and 11.x legacy versions on Windows, OS X, and Linux

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player from all systems

[Affected Scope] Adobe Flash Player 13.x through 13.0.0.302, 14.x through 18.0.0.203 on Windows/OS X, and 11.x/12.x on Linux

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), completely uninstall Flash Player and transition to modern web standards like HTML5

[Affected Scope] Adobe Flash Player 13.x through 18.x on Windows/OS X, and 11.x through 11.2.202.468 on Linux

[Impact] Remote attackers can execute arbitrary code or trigger a denial of service (system crash) via crafted Flash content

[Mitigation] Completely uninstall Adobe Flash Player or disable the Flash plugin across all web browsers and operating systems

[Affected Scope] Adobe Flash Player before 13.0.0.296, and 14.x through 18.x before 18.0.0.194 on Windows and OS X, and before 11.2.202.468 on Linux

[Impact] Remote attackers can execute arbitrary code and gain full system control via specially crafted malicious Flash content (.swf) without user interaction

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player and disable browser plugins across all systems

[Affected Scope] Adobe Flash Player versions before 13.0.0.281, 14.x through 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux

[Impact] Successful exploitation allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, which has been actively exploited in the wild

[Mitigation] Immediately uninstall Adobe Flash Player from all endpoints or upgrade to the patched versions, and disable Flash execution in web browsers

[Affected Scope] Adobe Flash Player before 13.0.0.269, 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux

[Impact] Remote attackers can execute arbitrary code (RCE) and gain full system control via specially crafted malicious Flash content (SWF) without user interaction

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the only secure mitigation is to completely uninstall Flash Player from all systems

[Affected Scope] Adobe Flash Player through 13.0.0.262, 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X, and through 11.2.202.438 on Linux

[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by enticing users to visit a website containing malicious Flash content (SWF)

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall Flash Player from all endpoints and disable Flash plugins in web browsers