Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.12143
Percentile: 0.935

CVSS Scoring

Affected Products

• cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.16:*:windows:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.28.0:*:mac_os_x:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
• cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*

← Back to Home