Flash Player Desktop Runtime vulnerabilitiesAnd the versions its exploited flaws hit.
Flash Player Desktop Runtime is made by Adobe. We track 294 published vulnerabilities in it, across 36 versions. 8 of them are on the list of flaws known to be exploited, the newest added on 25 May 2022. If you run Flash Player Desktop Runtime, check your version against the exploited flaws below and patch those first.
The most recent Flash Player Desktop Runtime flaw added to the known-exploited list is CVE-2016-1010, on 25 May 2022. We keep watching the known-exploited list.
Which versions of Flash Player Desktop Runtime do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2016-1010Exploited list, 25 May 2022
Adobe Flash Player and AIR Integer Overflow Vulnerability
up to 20.2.2.306 - CVE-2016-0984Exploited list, 25 May 2022
Adobe Flash Player and AIR Use-After-Free Vulnerability
up to 20.0.0.286 - CVE-2018-5002Exploited list, 23 May 2022
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
up to 29.0.0.171 - CVE-2015-5122Exploited list, 13 Apr 2022
Adobe Flash Player Use-After-Free Vulnerability
18.0 to 18.0.0.203 - CVE-2015-5123Exploited list, 13 Apr 2022
Adobe Flash Player Use-After-Free Vulnerability
18.0 to 18.0.0.203 - CVE-2016-7892Exploited list, 25 Mar 2022
Adobe Flash Player Use-After-Free Vulnerability
up to 23.0.0.207 - CVE-2017-11292Exploited list, 3 Mar 2022
Adobe Flash Player Type Confusion Vulnerability
up to 27.0.0.159 - CVE-2016-1019Exploited list, 3 Mar 2022
Adobe Flash Player Arbitrary Code Execution Vulnerability
up to 21.0.0.197
Which Flash Player Desktop Runtime vulnerabilities are being exploited?
8 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Adobe Flash Player and AIR Integer Overflow Vulnerability
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
- 8.8Adobe Flash Player and AIR Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
- 9.8Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
- 9.8Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
- 9.8Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
- 8.8Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.
- 8.8Adobe Flash Player Type Confusion Vulnerability
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
- 9.8Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
Which Flash Player Desktop Runtime flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 91%CVE-2014-0569Critical
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and...
- 55%
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before...
- 36%CVE-2016-4232High
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified...
- 33%CVE-2016-0971High
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before...
- 33%CVE-2016-4226High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via...
- 33%CVE-2016-4228High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via...
- 33%CVE-2016-4227High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via...
- 33%CVE-2016-4231High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via...
- 33%CVE-2017-2992High
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.
Running Flash Player Desktop Runtime? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
- Matched to
- Flash Player Desktop Runtime on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 294 published vulnerabilities listed under the name Flash Player Desktop Runtime, across 36 versions. The most recent Flash Player Desktop Runtime flaw added to the known-exploited list is CVE-2016-1010, on 25 May 2022.
8 are on the list of flaws known to be exploited. The most recently added are CVE-2016-1010, CVE-2016-0984 and CVE-2018-5002.
Each flaw names its own versions, usually as ranges. The newest, CVE-2016-1010, affects up to 20.2.2.306. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Flash Player Desktop Runtime. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.