Adobe Flash Player Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 8.0, < 8.2.3≥ 9.0, < 9.3.3 | 8.2.39.3.3 |
| air | < 2.0.2.12610 | 2.0.2.12610 |
| flash player | ≥ 10.0, < 10.1.53.64< 9.0.277.0 | 10.1.53.649.0.277.0 |
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free