CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Flash Player Universal Cross-Site Scripting (UXSS) Vulnerability (CVE-2012-0767, CISA KEV)
[Affected Scope] Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, macOS, Linux, and Solaris; Android 2.x/3.x/4.x mobile versions
[Impact] Remote attackers can bypass the Same-Origin Policy (SOP) via malicious Flash content, executing arbitrary scripts in the context of any website visited by the user to steal sessions and sensitive data
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it must be completely uninstalled from all systems, or disabled at the browser level in legacy environments
Adobe Reader, Acrobat, and Flash Player Remote Code Execution Vulnerability (CVE-2009-1862, authplay.dll Memory Corruption)
[Affected Scope] Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted Flash application in a .pdf file or a crafted .swf file
[Mitigation] Immediately upgrade to the latest patched versions, or apply workarounds such as disabling or renaming the authplay.dll component to prevent exploitation