Adobe Flash Player Arbitrary Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| air desktop runtime | ≤ 21.0.0.176 | |
| air sdk | ≤ 21.0.0.176 | |
| air sdk & compiler | ≤ 21.0.0.176 | |
| flash player | ≤ 11.2.202.577≤ 18.0.0.333≤ 21.0.0.197 | |
| flash player desktop runtime | ≤ 21.0.0.197 |
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free