Adobe Flash vulnerabilities

2 CVEs affecting Adobe Flash, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6019, published 2008-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6019, published 2008-04-09. High severity, CVSS 9.3. EPSS: 59.8% chance of exploitation in the next 30 days. Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents…
CVE-2008-1201, published 2008-03-24. Medium severity, CVSS 6.8. EPSS: 19.7% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary…