Flash Player For Linux

Vendor:

First CVE: Dec 18, 2008 · Active for 17 years

21
Total CVEs
More Total CVEs than 94% of tracked products
4.2
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Flash Player For Linux over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 18, 2008
17 years ago
Most Recent CVE
Jun 27, 2017
3,314 days ago

CVE Severity & Scoring

Flash Player For Linux21 CVEs
All CVEs352,294 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network10 (47.6%)
Unknown11 (52.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (47.6%)
High0 (0.0%)
Unknown11 (52.4%)
User Interaction
None1 (4.8%)
Unknown11 (52.4%)
Required9 (42.9%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None10 (47.6%)
Unknown11 (52.4%)

Top CVEs

Signals from CVEs in this product scope (21 CVEs).

21 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2008-5499HIGH
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.
Dec 18, 20089.383NOYES
CVE-2009-0520HIGH
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows rem
Feb 26, 20099.350NOYES
CVE-2010-2216HIGH
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption
Aug 11, 20109.332NONO
CVE-2010-2214HIGH
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption
Aug 11, 20109.332NONO
CVE-2016-7861HIGH
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code
Nov 8, 20168.831NONO
CVE-2010-2213HIGH
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption
Aug 11, 20109.331NONO
CVE-2009-0519HIGH
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly exe
Feb 26, 20099.329NONO
CVE-2016-0959CRITICAL
Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google C
Jun 27, 20179.827NONO
CVE-2010-0209HIGH
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption
Aug 11, 20109.327NONO
CVE-2016-7865HIGH
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code
Nov 8, 20168.824NONO
View all 21 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (21 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
4.8% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
9.5% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (21 CVEs).

Media Mentions

Signals from CVEs in this product scope (21 CVEs).

Top CNAs Publishing CVEs For Flash Player For Linux

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.0.48.068.516.9%01
9.0.3168.516.9%01
9.0.151.058.34.4%00
9.0.124.068.516.9%01
9.0.115.068.516.9%01
10.0.15.358.34.4%00
10.0.12.3677.914.7%01