by Kastro
Paper/Archive/CVE-2020-9633

CVE-2020-9633

Adobe Adobe Flash Player — Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash P…

EPSS 8%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.6.946 × 2018.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected

ProductAffectedFixed inSource
Adobe Flash Player32.0.0.371 and earlier, 32.0.0.371 and earlier, and 32.0.0.330 and earlier versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhelpx.adobe.com/security/products/flash-player/apsb20-30.htmladvisorysecurity.gentoo.org/glsa/202006-09