Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAdobe Flash Player
APPAdobe≤ 31.0.0.148Adobe Flash Player Desktop Runtime
APPAdobe≤ 31.0.0.148Apple Mac Os X
OSAppleall versionsGoogle Chrome Os
OSGoogleall versionsLinux Kernel
OSLinuxall versionsMicrosoft Windows
OSMicrosoftall versionsMicrosoft Windows 10
OSMicrosoftall versionsMicrosoft Windows 8.1
OSMicrosoftall versionsRed Hat Enterprise Linux Desktop
OSRedhat6.0Red Hat Enterprise Linux Server
OSRedhat6.0Red Hat Enterprise Linux Workstation
OSRedhat6.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References
Related vulnerabilities
CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product
Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓same product
Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows
CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓same product
PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit