CVE-2008-3872: Adobe Flash Player

High severity, CVSS 9.3. EPSS: 4.2% chance of exploitation in the next 30 days.

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Affected products

• Adobe Flash Player: from 8.0, up to and including 8.0.39.0; from 9.0, up to and including 9.0.115.0

Published 2008-10-06. Last modified 2026-06-16.