CVE-2020-9633

Katalog CVE

CVSS 9.8 · Critical EPSS 7,6%

Kerentanan Use After Free pada adobe flash player desktop runtime, adobe flash player. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Rincian

Terbit di NVD

12 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

7,6% peluang dieksploitasi; lebih tinggi dari 94,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/flash-player/apsb20-30.html advisory vendor
• https://security.gentoo.org/glsa/202006-09 advisory pihak ketiga