CVE-2008-4503: Adobe Flash Player

Medium severity, CVSS 6.8. EPSS: 5.3% chance of exploitation in the next 30 days.

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."

Affected products

• Adobe Flash Player: up to and including 9.0.124.0; version 7.0 only; version 7.0.1 only; version 7.0.25 only; version 7.0.63 only; version 7.0.69.0 only; …

Published 2008-10-09. Last modified 2026-06-16.