CVE-2007-2022: Adobe Flash Player

Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

Affected products

• Adobe Flash Player: version 7.0.25 only; version 8.0 only; version 9.0.18d60 only; version 9.0.20 only; version 9.0.28 only
• Opera Opera Browser: version 5.0 only; version 5.02 only; version 5.10 only; version 5.11 only; version 5.12 only; version 6.0 only; …

Published 2007-04-13. Last modified 2026-06-16.