CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-02-16
Adobe Flash Player Universal Cross-Site Scripting (UXSS) Vulnerability (CVE-2012-0767, CISA KEV)
[Affected Scope] Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, macOS, Linux, and Solaris; Android 2.x/3.x/4.x mobile versions
[Impact] Remote attackers can bypass the Same-Origin Policy (SOP) via malicious Flash content, executing arbitrary scripts in the context of any website visited by the user to steal sessions and sensitive data
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it must be completely uninstalled from all systems, or disabled at the browser level in legacy environments