CVE-2020-9633: Use After Free
First published: Fri Jun 12 2020(Updated: )
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Flash Player Desktop Runtime | <=32.0.0.371 | |
| Apple macOS | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Adobe Flash Player | <=32.0.0.371 | |
| Google Chrome OS | ||
| Adobe Flash Player | <=32.0.0.330 | |
| Adobe Flash Player | <=32.0.0.330 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Adobe Flash Player vulnerability?
The vulnerability ID for this Adobe Flash Player vulnerability is CVE-2020-9633.
What is the severity level of CVE-2020-9633?
The severity level of CVE-2020-9633 is critical.
Which software versions are affected by CVE-2020-9633?
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier are affected by CVE-2020-9633.
What is the potential impact of exploiting CVE-2020-9633?
Successful exploitation of CVE-2020-9633 could lead to arbitrary code execution.
Where can I find more information about CVE-2020-9633?
You can find more information about CVE-2020-9633 on the Adobe security bulletin at https://helpx.adobe.com/security/products/flash-player/apsb20-30.html and the Gentoo security advisory at https://security.gentoo.org/glsa/202006-09.
- collector/nvd-index
- agent/description
- agent/event
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe flash player desktop runtime
- version/adobe flash player desktop runtime/32.0.0.371
- vendor/apple
- canonical/apple macos
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- canonical/adobe flash player
- version/adobe flash player/32.0.0.371
- vendor/google
- canonical/google chrome os
- version/adobe flash player/32.0.0.330
- canonical/microsoft windows 10
- canonical/microsoft windows 8.1