CVE-2012-0754KEV · OVERDUE

Adobe Flash Player Memory Corruption Vulnerability

High · published February 16, 2012

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1583
days past CISA
deadline
CVSS v3.1
7.8
EPSS
91%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 An attacker can execute arbitrary code just by targeting vulnerable versions of Adobe Flash Player—no special skills required! ⚡ Think of it like a restaurant that accepts any delivery without checking the order details. If the kitchen has no idea what’s about to be served, anyone could send in a dangerous dish, leading to chaos! With this vulnerability, an attacker could crash your system or, even worse, take complete control—stealing sensitive data or launching further attacks. This means your system could be left defenseless, leading to potentially devastating consequences like data breaches or system outages.

Put simply

Think of it like a restaurant that accepts any delivery without checking the order details. If the kitchen has no idea what’s about to be served, anyone could send in a dangerous dish, leading to chaos! This vulnerability in Adobe Flash Player allows attackers to exploit memory corruption issues, letting them execute arbitrary code on the affected system. It affects various operating systems and versions, making it a widespread threat.

What to do

With this vulnerability, an attacker could crash your system or, even worse, take complete control—stealing sensitive data or launching further attacks. This means your system could be left defenseless, leading to potentially devastating consequences like data breaches or system outages. Update Adobe Flash Player to at least version 10.3.183.15 or 11.x 11.1.102.62 immediately. If you’re using Android, make sure to upgrade to version 11.1.115.6. Don’t forget to review your software regularly and enable automatic updates! You've got this! With a quick update, you'll bolster your defenses and keep your system safe. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.91085 · 99.8th percentile
Published
2012-02-16T19:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 16 FEB 19:00Z
    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and…
    cvelistv5