CVE-2020-3757: Adobe Flash Player

High severity, CVSS 8.8. EPSS: 10.2% chance of exploitation in the next 30 days.

Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

  • Adobe Flash Player: before 32.0.0.321 (fixed in 32.0.0.321); before 32.0.0.314 (fixed in 32.0.0.314); up to and including 32.0.0.321; up to and including 32.0.0.255
  • Red Hat Enterprise Linux Desktop: version 6.0 only
  • Red Hat Enterprise Linux Server: version 6.0 only
  • Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2020-02-13. Last modified 2026-06-17.