CVE-2009-1860: Adobe Shockwave Player

High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.

Affected products

• Adobe Shockwave Player: up to and including 11.5.0.596; version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 5.0 only; …

Published 2009-06-25. Last modified 2026-06-16.