- Vendor / Project
- Adobe
- Product
- Flash Player
- Date added
- May 25, 2022
- Due date
- Jun 15, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-264
Description
Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.
Required action
The impacted product is end-of-life and should be disconnected if still in use.