CVE-2011-2427: Adobe Flash Player

High severity, CVSS 9.3. EPSS: 6.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Affected products

• Adobe Flash Player: up to and including 10.3.183.7; version 6.0.21.0 only; version 6.0.79 only; version 7.0 only; version 7.0.1 only; version 7.0.14.0 only; …

Published 2011-09-22. Last modified 2026-06-16.