adobe flash player

Name: adobe flash player
Brand: adobe

productUS

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

50critical927high106medium1low

updated 2026-10-27

vulnerabilities (1,084)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-0497US	critical9.8OT critical	99.9% (100th)	KEV	11.7.700.261	2014-02-05	3 versions
CVE-2015-3113US	critical9.8OT critical	99.8% (100th)	KEV	18.0.0.194	2015-06-23	3 versions
CVE-2011-0611US	high8.8OT critical	99.4% (100th)	KEV	10.2.154.27	2011-04-13	2 versions
CVE-2015-5119US	critical9.8OT critical	98.6% (100th)	KEV	no fix	2015-07-08	3 versions
CVE-2015-0313US	critical9.8OT critical	95.3% (100th)	KEV	16.0.0.305	2015-02-02	3 versions
CVE-2016-4117US	critical9.8OT critical	94.4% (100th)	KEV	no fix	2016-05-11	≤ 21.0.0.226
CVE-2012-0754US	high8.1OT critical	91.1% (100th)	KEV	11.1.115.6	2012-02-16	4 versions
CVE-2018-4878US	high7.8OT critical	90.3% (100th)	KEV	28.0.0.161	2018-02-06	< 28.0.0.161
CVE-2018-15982US	high7.8OT critical	89.6% (100th)	KEV	no fix	2019-01-18	≤ 31.0.0.153
CVE-2015-5122US	critical9.8OT critical	87.0% (100th)	KEV	no fix	2015-07-14	4 versions
CVE-2015-0311US	critical9.8OT critical	85.6% (100th)	KEV	16.0.0.287	2015-01-23	3 versions
CVE-2010-1297US	high7.8OT critical	82.5% (100th)	KEV	9.0.277.0	2010-06-08	2 versions
CVE-2015-3043US	critical9.8OT critical	73.9% (99th)	KEV	13.0.0.281	2015-04-14	3 versions
CVE-2012-1535US	high7.8OT critical	70.4% (99th)	KEV	11.3.300.271	2012-08-15	2 versions
CVE-2015-7645US	high7.8OT critical	65.3% (99th)	KEV	no fix	2015-10-15	4 versions
CVE-2011-0609US	high7.8OT critical	63.5% (99th)	KEV	no fix	2011-03-15	2 versions
CVE-2016-0984US	high8.8OT critical	54.5% (99th)	KEV	no fix	2016-02-10	4 versions
CVE-2016-7855US	high8.8OT critical	25.2% (98th)	KEV	no fix	2016-11-01	2 versions
CVE-2015-8651US	high8.8OT critical	67.7% (99th)	KEV	20.0.0.267	2015-12-28	3 versions
CVE-2014-9163US	high10.0OT critical	44.9% (99th)	KEV	11.2.202.425	2014-12-10	4 versions
CVE-2018-5002US	high7.8OT critical	25.1% (98th)	KEV	no fix	2018-07-09	≤ 29.0.0.171
CVE-2014-0502US	high8.8OT critical	24.8% (98th)	KEV	11.7.700.269	2014-02-21	3 versions
CVE-2016-1019US	critical9.8OT critical	22.3% (98th)	KEV	no fix	2016-04-07	3 versions
CVE-2009-1862US	high7.8OT critical	21.2% (98th)	KEV	no fix	2009-07-23	2 versions
CVE-2012-5054US	high8.8OT critical	21.2% (98th)	KEV	11.4.402.265	2012-09-24	< 11.4.402.265
CVE-2014-8439US	high10.0OT critical	20.4% (97th)	KEV	no fix	2014-11-25	3 versions
CVE-2016-4171US	critical9.8OT critical	20.1% (97th)	KEV	no fix	2016-06-16	3 versions
CVE-2016-1010US	high8.8OT critical	19.3% (97th)	KEV	no fix	2016-03-12	2 versions
CVE-2015-5123US	critical9.8OT critical	18.8% (97th)	KEV	no fix	2015-07-14	3 versions
CVE-2016-7892US	high8.8OT critical	18.8% (97th)	KEV	no fix	2016-12-15	2 versions
CVE-2015-0310US	high10.0OT critical	15.1% (97th)	KEV	16.0.0.287	2015-01-23	3 versions
CVE-2017-11292US	high8.8OT critical	11.9% (96th)	KEV	no fix	2017-10-22	2 versions
CVE-2013-0648US	high8.8OT critical	11.1% (96th)	KEV	10.3.183.67	2013-02-27	3 versions
CVE-2013-0643US	high8.8OT critical	10.5% (96th)	KEV	11.6.602.171	2013-02-27	3 versions
CVE-2012-2034US	high7.5OT critical	7.71% (95th)	KEV	no fix	2012-06-09	3 versions
CVE-2012-0767US	medium6.1OT critical	6.19% (93rd)	KEV	11.1.111.6	2012-02-16	4 versions
CVE-2014-0515US	high10.0	94.5% (100th)	Exploit	11.7.700.279	2014-04-29	3 versions
CVE-2015-0359US	high10.0	92.1% (100th)	Exploit	no fix	2015-04-14	17 versions
CVE-2014-0569US	high9.3	91.3% (100th)	Exploit	no fix	2014-10-15	4 versions
CVE-2015-3105US	high10.0	90.1% (100th)	Exploit	no fix	2015-06-10	19 versions
CVE-2012-0779US	high9.3	87.1% (100th)	Exploit	10.3.183.19	2012-05-04	4 versions
CVE-2011-2110US	high10.0	86.4% (100th)	Exploit	no fix	2011-06-16	89 versions
CVE-2014-0556US	high10.0	84.6% (100th)	Exploit	no fix	2014-09-10	42 versions
CVE-2015-3090US	high10.0	83.2% (100th)	Exploit	no fix	2015-05-13	18 versions
CVE-2011-2140US	high10.0	82.3% (100th)	Exploit	no fix	2011-08-10	92 versions
CVE-2014-8440US	high10.0	81.9% (100th)	Exploit	15.0.0.223	2014-11-11	4 versions
CVE-2013-0634US	high9.3	77.6% (100th)	Exploit	11.5.502.149	2013-02-08	5 versions
CVE-2015-0318US	high10.0	75.2% (100th)	Exploit	no fix	2015-02-06	16 versions
CVE-2015-3087US	high10.0	74.3% (99th)	Exploit	no fix	2015-05-13	18 versions
CVE-2013-5331US	high9.3	72.5% (99th)	Exploit	11.2.202.332	2013-12-11	4 versions

showing 50 of 1,084

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer420 CVEs
CWE-416Use After Free260 CVEs
CWE-787Out-of-bounds Write151 CVEs
CWE-17CWE-1769 CVEs
CWE-264CWE-26453 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor43 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')40 CVEs
CWE-20Improper Input Validation29 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE1,084 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan