Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Adobe, Flash Player
Description
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
CVSS severity for this advisory hasn't been enriched from NVD yet, check back shortly.
EPSS, exploit probability
Critical87.0%
estimated chance of real-world exploitation in the next 30 days, higher than 99.7% of every CVE FIRST.org scores
Refreshed 10/28/2026, via FIRST.org's EPSS model, not CVSS, this measures likelihood of exploitation, not how severe it would be.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA-recommended due date: 2022-05-04
We help organizations confirm real exposure and prioritize what actually needs fixing first.