CVE-2007-6243: Adobe Flash Player

High severity, CVSS 9.3. EPSS: 8.5% chance of exploitation in the next 30 days.

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

Affected products

• Adobe Flash Player: up to and including 9.0.48.0

Published 2007-12-20. Last modified 2026-06-16.