CVE-2009-0521: Adobe Flash Player For Linux

Medium severity, CVSS 4.6. EPSS: 1.1% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.

Affected products

• Adobe Flash Player For Linux: up to and including 10.0.15.3; version 10.0.12.36 only

Published 2009-02-26. Last modified 2026-06-16.