Adobe Flash Player For Linux vulnerabilities

21 CVEs affecting Adobe Flash Player For Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0959, published 2017-06-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-5499, published 2008-12-18. High severity, CVSS 9.3. EPSS: 79.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.
CVE-2009-0520, published 2009-02-26. High severity, CVSS 9.3. EPSS: 28.5% chance of exploitation in the next 30 days. Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to…
CVE-2009-0519, published 2009-02-26. High severity, CVSS 9.3. EPSS: 14.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code…
CVE-2016-7861, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7.3% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7860, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7.3% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7865, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7.2% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7863, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7.1% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7862, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7.1% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7864, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7859, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

Latest

CVE-2016-0959, published 2017-06-27. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before…
CVE-2016-7858, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7857, published 2016-11-08. High severity, CVSS 8.8. EPSS: 7% chance of exploitation in the next 30 days. Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.