peter bassill · operator
$ cve CVE-2012-0754 JSON

CVE-2012-0754 KEV EXPLOIT

8.1
HIGH · CVSS 3.1 · EPSS 91.2% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-22.

Description

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Scoring

CVSS8.1 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS91.24% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-787
On CISA KEVyes — remediate by 2022-06-22
Public exploityes
Published2012-02-16
Last modified2026-06-16

CISA KEV

NameAdobe Flash Player Memory Corruption Vulnerability
Added2022-06-08
Due2022-06-22
Vendor / productAdobe / Flash Player
Ransomware usenone reported

Affected (6)

VendorProduct
adobeflash player
applemac os x
googleandroid
linuxlinux kernel
microsoftwindows
oraclesolaris

Public exploits

SourceTitleDate
exploit-dbAdobe Flash Player - '.mp4 cprt' Remote Overflow (Metasploit)2012-03-08

References

→ the Explorer  ·  watch your stack  ·  NVD