CVE-2006-4640: Adobe Flash Player

Medium severity, CVSS 6.8. EPSS: 10.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.

Affected products

• Adobe Flash Player: any version; up to and including 8.0.24.0; version 8 only; version mx_2004 only

Published 2006-09-12. Last modified 2026-06-16.