- Vendor / Project
- Adobe
- Product
- Flash Player
- Date added
- Apr 13, 2022
- Due date
- May 4, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-416
Description
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Required action
The impacted product is end-of-life and should be disconnected if still in use.