{"id":"CVE-2012-0754","kind":"vulnerability","aliases":["CVE-2012-0754"],"related":[],"title":"Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before…","description":"Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","summary":"Adobe Flash Player has a memory corruption flaw that lets a remote attacker run code or crash the player. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":9.3,"epss":0.91085,"exploited":true,"exploited_at":"2022-06-08T00:00:00+00:00","products":[{"name":"adobe flash player","fixed":["10.3.183.15"],"affected":"< 10.3.183.15","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.1.102.62"],"affected":">= 11.0, < 11.1.102.62","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.1.111.6"],"affected":"< 11.1.111.6","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.1.115.6"],"affected":"< 11.1.115.6","ecosystem":"vendor"},{"name":"Adobe Flash Player","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-flash-player","browsers","exploited","macos","package","windows"],"not_affected_if":["no-flash-installed"],"how_to_check":"Check whether Adobe Flash Player is installed on any machine or browser the team runs, for example by looking for the Flash plugin in browser add-on settings.","fix":"Remove Adobe Flash Player; the product is end-of-life and CISA says to disconnect any system still using it.","status":"open","published_at":"2012-02-16T19:55:01+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:53+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:12:53Z","model":"claude-haiku-5-5","output":{"fix":"Remove Adobe Flash Player; the product is end-of-life and CISA says to disconnect any system still using it.\nunknown","reach":"internet","impact":"high","summary":"Adobe Flash Player has a memory corruption flaw that lets a remote attacker run code or crash the player. CISA lists it as actively exploited in the wild.","category":"package","who_cares":["adobe-flash-player","browsers","windows","macos"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the victim's machine via a crafted Flash content","analyst_note":"Confirm the affected and fixed Flash Player versions from Adobe's advisory, since the sources list them as unknown.","how_to_check":"Check whether Adobe Flash Player is installed on any machine or browser the team runs, for example by looking for the Flash plugin in browser add-on settings.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["no-flash-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000475,"input_tokens":2838,"output_tokens":383,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0754':21A,24A '-2012':20A,23A '10.3.183.15':5A,81C '11':7A,83C '11.1.102.62':10A,86C '11.1.111.6':96C '11.1.115.6':106C '2':99C '3':102C '4':109C 'activ':72B 'adob':1A,41B,49B,77C 'adobe':25A,28A,31A,34A,37A 'adobe-flash-play':40B 'allow':111C 'android':98C,108C 'arbitrari':115C 'attack':61B,112C 'browser':44B 'caus':118C 'cisa':68B 'code':63B,116C 'corrupt':55B,124C 'crash':65B 'cve':19A,22A 'denial':120C 'execut':114C 'exploit':45B,73B 'flash':2A,26A,29A,32A,35A,38A,42B,50B,78C 'flaw':56B 'let':58B 'linux':16A,92C 'list':69B 'mac':13A,89C 'maco':46B 'memori':54B,123C 'os':14A,90C 'packag':47B 'player':3A,27A,30A,33A,36A,39A,43B,51B,67B,79C 'remot':60B 'run':62B 'servic':122C 'solari':18A,94C 'unspecifi':126C 'vector':127C 'via':125C 'wild':76B 'window':12A,48B,88C 'x':8A,15A,84C,91C,100C,103C,110C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2012-02-16T19:55:01+00:00","kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2012-0754","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","severity":null,"published_at":"2022-06-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2012-0754","url":"https://api.first.org/data/v1/epss?cve=CVE-2012-0754","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2012-0754","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","severity":null,"published_at":"2012-02-16T19:55:01+00:00","modified_at":"2026-06-16T23:38:11+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}