Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Macromedia

First CVE: Mar 14, 1997Active for: 29 yearsTotal CVEs: 116
43.4
VTI Score
High

Macromedia's vulnerability footprint spans a modest but strategically important portfolio of media, application server, and plugin products—Flash Player, Shockwave, ColdFusion, and JRun—that achieved prominent deployment across web browsers and enterprise environments. Although the vulnerability volume is moderate, the vendor's disclosures frequently acquire public exploit code, reflecting the high visibility and attack appeal of widely embedded plugins and server-side application platforms. The recurring weakness classes cluster around memory-safety and code-injection issues—buffer boundary violations, code injection, and sensitive information exposure—that are characteristic of complex binary formats and dynamic scripting environments. These products represent legacy but historically significant attack vectors; defenders tracking older deployments or archived systems should recognize the durable risk profile of this vendor's exposure. Current exploitation activity, severity distribution, and CVE counts are shown alongside this summary.

FAUCET AI Generated
116
Total CVEs
More Total CVEs than 99% of tracked vendors
0.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 4% of tracked vendors
6.7
Avg CVSS Score
Higher Avg CVSS Score than 44% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Macromedia over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 14, 1997
29 years ago
Most Recent CVE
Oct 29, 2010
5,747 days ago

Products(21 total)

Top CVEs

Signals from CVEs in this vendor scope (116 CVEs).

116 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2010-3654HIGH
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libau
Oct 29, 20109.383NOYES
CVE-2002-0665HIGH
Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.
Jul 11, 200210.046NOYES
CVE-2007-1403HIGH
Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7
Mar 10, 20077.543NOYES
CVE-2000-1053HIGH
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.
Dec 11, 200010.040NOYES
CVE-2005-3591HIGH
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) a
Nov 16, 20057.534NOYES
CVE-2009-3793HIGH
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory
Jun 15, 20109.333NONO
CVE-2010-2185HIGH
Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified
Jun 15, 20109.332NONO
CVE-2010-2173HIGH
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related t
Jun 15, 20109.332NONO
CVE-2010-2170HIGH
Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecifie
Jun 15, 20109.332NONO
CVE-2010-2167HIGH
Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary
Jun 15, 20109.332NONO
View all 116 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products116 CVEs
45%
51%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local1 (0.9%)
Network0 (0.0%)
Unknown115 (99.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (0.9%)
High0 (0.0%)
Unknown115 (99.1%)
User Interaction
None1 (0.9%)
Unknown115 (99.1%)
Required0 (0.0%)
Privileges Required
Low1 (0.9%)
High0 (0.0%)
None0 (0.0%)
Unknown115 (99.1%)

Exploit Exposure

Signals from CVEs in this vendor scope (116 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
0.9% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
16 CVEs
13.8% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Macromedia.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Macromedia — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Macromedia's Products

View all 3 CNAs →

Top CWEs