Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9633

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Published

2020-06-12T14:15:11.450

Last Modified

2024-11-21T05:41:00.097

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-416
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe flash_player_desktop_runtime ≤ 32.0.0.371 Yes
Operating System apple macos - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 32.0.0.371 Yes
Operating System apple macos - No
Operating System google chrome_os - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 32.0.0.330 Yes
Application adobe flash_player ≤ 32.0.0.330 Yes
Operating System microsoft windows_10 * No
Operating System microsoft windows_8.1 * No
References