10 CVEs publicados el 2022-05-13 · 1 con explotación activa confirmada por CISA KEV · 1 con prueba de concepto pública · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
adobe/flash_playerapple/macosgoogle/chrome_oslinux/linux_kernelmicrosoft/windowsmicrosoft/windows_10microsoft/windows_8.1redhat/enterprise_linux_desktop
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2017-11213 | CRITICAL | 9.8 | 6.5% | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to a | |
| CVE-2017-11215 | CRITICAL | 9.8 | 6.1% | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and | |
| CVE-2017-11225 | CRITICAL | 9.8 | 6.1% | Vulnerabilidad use-after-free en Adobe Flash Player 27.0.0.183 permite ejecución de código arbitrario con CVSS 9.8. | |
| CVE-2017-11281 | CRITICAL | 9.8 | 33.9% | Adobe Flash Player 26.0.0.151 y anteriores presenta un fallo de corrupción de memoria que permite ejecución remota de código. | |
| CVE-2017-11282 | CRITICAL | 9.8 | 34.9% | Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier. | |
| CVE-2017-3112 | CRITICAL | 9.8 | 6.2% | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the com | |
| CVE-2017-3114 | CRITICAL | 9.8 | 6.2% | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the com | |
| CVE-2018-4877 | CRITICAL | 9.8 | 8.4% | A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of ser | |
| CVE-2018-4944 | CRITICAL | 9.8 | 8.6% | Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. | |
| CVE-2018-4878 | CRITICAL | 7.8 | 89.5% | KEV PoC | Vulnerabilidad use-after-free en Adobe Flash Player anterior a 28.0.0.161, explotada en el wild desde 2018 y vinculada a campañas de ransomware. |