CVE-2011-0627

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-13 · updated 2026-06-23
Weakness: CWE-20

Description

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.

Affected products

Adobe Flash Player 24.0.0.186 and earlier.: through 10.2.159.1; through 10.2.157.51; 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.14.0, 7.0.19.0 (+76)

References

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html
http://www.adobe.com/support/security/bulletins/apsb11-12.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13914
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16053
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html
http://www.adobe.com/support/security/bulletins/apsb11-12.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13914
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16053

Get alerted when CVE-2011-0627 or the next vulnerability affects your stack