adobe flash player desktop runtime

Name: adobe flash player desktop runtime
Brand: adobe

productUS

cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

15critical263high16medium0low

updated 2026-10-27

vulnerabilities (294)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-5122US	critical9.8OT critical	87.0% (100th)	KEV	no fix	2015-07-14	18.0 → 18.0.0.203
CVE-2016-0984US	high8.8OT critical	54.5% (99th)	KEV	no fix	2016-02-10	≤ 20.0.0.286
CVE-2018-5002US	high7.8OT critical	25.1% (98th)	KEV	no fix	2018-07-09	≤ 29.0.0.171
CVE-2016-1019US	critical9.8OT critical	22.3% (98th)	KEV	no fix	2016-04-07	≤ 21.0.0.197
CVE-2016-1010US	high8.8OT critical	19.3% (97th)	KEV	no fix	2016-03-12	≤ 20.2.2.306
CVE-2015-5123US	critical9.8OT critical	18.8% (97th)	KEV	no fix	2015-07-14	18.0 → 18.0.0.203
CVE-2016-7892US	high8.8OT critical	18.8% (97th)	KEV	no fix	2016-12-15	≤ 23.0.0.207
CVE-2017-11292US	high8.8OT critical	11.9% (96th)	KEV	no fix	2017-10-22	≤ 27.0.0.159
CVE-2014-0569US	high9.3	91.3% (100th)	Exploit	no fix	2014-10-15	≤ 15.0.0.167
CVE-2016-4232US	high7.5	36.5% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-0971US	high8.8	33.5% (98th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2016-4228US	high8.8	33.1% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4226US	high8.8	33.1% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4231US	high8.8	32.9% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4227US	high8.8	32.9% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2017-2992US	high8.8	32.7% (98th)	Exploit	no fix	2017-02-15	≤ 24.0.0.194
CVE-2016-4229US	high8.8	32.5% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4230US	high8.8	32.2% (98th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2017-2986US	high8.8	30.9% (98th)	Exploit	no fix	2017-02-15	≤ 24.0.0.194
CVE-2016-0974US	high8.8	30.8% (98th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2016-1000US	high8.8	28.6% (98th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-0999US	high8.8	28.6% (98th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-0997US	high8.8	28.5% (98th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-0998US	high8.8	28.3% (98th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-0985US	high8.8	26.1% (98th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2018-4937US	high8.8	25.7% (98th)	Exploit	no fix	2018-05-19	≤ 29.0.0.113
CVE-2018-4935US	high8.8	25.7% (98th)	Exploit	no fix	2018-05-19	≤ 29.0.0.113
CVE-2016-4138US	critical9.8	25.4% (98th)	Exploit	no fix	2016-06-16	≤ 21.0.0.242
CVE-2016-1001US	high8.8	25.1% (98th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-1011US	high8.8	24.9% (98th)	Exploit	no fix	2016-04-09	≤ 21.0.0.197
CVE-2018-4936US	medium6.5	24.7% (98th)	Exploit	no fix	2018-05-19	≤ 29.0.0.113
CVE-2017-3106US	high8.8	22.3% (98th)	Exploit	no fix	2017-08-11	≤ 26.0.0.137
CVE-2017-2985US	high8.8	21.8% (98th)	Exploit	no fix	2017-02-15	≤ 24.0.0.194
CVE-2016-1013US	high8.8	21.8% (98th)	Exploit	no fix	2016-04-09	≤ 21.0.0.197
CVE-2016-4179US	high8.8	20.5% (97th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4175US	high8.8	20.5% (97th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2017-3068US	high8.8	20.4% (97th)	Exploit	no fix	2017-05-09	2 versions
CVE-2016-4273US	high8.8	19.9% (97th)	Exploit	no fix	2016-10-13	≤ 23.0.0.162
CVE-2018-4934US	medium6.5	19.8% (97th)	Exploit	no fix	2018-05-19	≤ 29.0.0.113
CVE-2016-1002US	high8.8	19.7% (97th)	Exploit	no fix	2016-03-12	≤ 20.2.2.306
CVE-2016-0967US	high8.8	19.7% (97th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2016-0965US	high8.8	19.7% (97th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2016-0964US	high8.8	19.7% (97th)	Exploit	no fix	2016-02-10	≤ 20.0.0.286
CVE-2016-4275US	high8.8	19.4% (97th)	Exploit	no fix	2016-09-14	≤ 22.0.0.211
CVE-2017-2988US	high8.8	18.1% (97th)	Exploit	no fix	2017-02-15	≤ 24.0.0.194
CVE-2016-4177US	high8.8	17.6% (97th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4176US	high8.8	17.6% (97th)	Exploit	no fix	2016-07-13	≤ 22.0.0.192
CVE-2016-4135US	high8.8	16.5% (97th)	Exploit	no fix	2016-06-16	≤ 21.0.0.242
CVE-2016-4137US	high8.8	16.4% (97th)	Exploit	no fix	2016-06-16	≤ 21.0.0.242
CVE-2016-4136US	high8.8	16.4% (97th)	Exploit	no fix	2016-06-16	≤ 21.0.0.242

showing 50 of 294

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write133 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer124 CVEs
CWE-416Use After Free76 CVEs
CWE-17CWE-1737 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-125Out-of-bounds Read8 CVEs
CWE-190Integer Overflow or Wraparound8 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE294 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan