--- id: CVE-2011-0627 title: >- Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content… summary: >- Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content… severity: high cvss: 8.8 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H' cwe: - CWE-20 - CWE-20 vendor: adobe product: flash_player affected: - flash_player <= 10.2.159.1 - flash_player = 6.0.21.0 - flash_player = 6.0.79 - flash_player = 7.0 - flash_player = 7.0.1 - flash_player = 7.0.14.0 - flash_player = 7.0.19.0 - flash_player = 7.0.24.0 - flash_player = 7.0.25 - flash_player = 7.0.53.0 - flash_player = 7.0.60.0 - flash_player = 7.0.61.0 - flash_player = 7.0.63 - flash_player = 7.0.66.0 - flash_player = 7.0.67.0 - flash_player = 7.0.68.0 - flash_player = 7.0.69.0 - flash_player = 7.0.70.0 - flash_player = 7.0.73.0 - flash_player = 7.1 - flash_player = 7.1.1 - flash_player = 7.2 - flash_player = 8.0 - flash_player = 8.0.22.0 - flash_player = 8.0.24.0 - flash_player = 8.0.33.0 - flash_player = 8.0.34.0 - flash_player = 8.0.35.0 - flash_player = 8.0.39.0 - flash_player = 8.0.42.0 - flash_player = 9.0 - flash_player = 9.0.16 - flash_player = 9.0.18d60 - flash_player = 9.0.20 - flash_player = 9.0.20.0 - flash_player = 9.0.28 - flash_player = 9.0.28.0 - flash_player = 9.0.31 - flash_player = 9.0.31.0 - flash_player = 9.0.45.0 - flash_player = 9.0.47.0 - flash_player = 9.0.48.0 - flash_player = 9.0.112.0 - flash_player = 9.0.114.0 - flash_player = 9.0.115.0 - flash_player = 9.0.124.0 - flash_player = 9.0.125.0 - flash_player = 9.0.151.0 - flash_player = 9.0.152.0 - flash_player = 9.0.155.0 - flash_player = 9.0.159.0 - flash_player = 9.0.246.0 - flash_player = 9.0.260.0 - flash_player = 9.0.262.0 - flash_player = 9.0.277.0 - flash_player = 9.0.283.0 - flash_player = 9.125.0 - flash_player = 10.0.0.584 - flash_player = 10.0.12.10 - flash_player = 10.0.12.36 - flash_player = 10.0.15.3 - flash_player = 10.0.22.87 - flash_player = 10.0.32.18 - flash_player = 10.0.42.34 - flash_player = 10.0.45.2 - flash_player = 10.1.52.14.1 - flash_player = 10.1.52.15 - flash_player = 10.1.53.64 - flash_player = 10.1.82.76 - flash_player = 10.1.85.3 - flash_player = 10.1.92.8 - flash_player = 10.1.92.10 - flash_player = 10.1.95.1 - flash_player = 10.1.95.2 - flash_player = 10.1.102.64 - flash_player = 10.2.152 - flash_player = 10.2.152.32 - flash_player = 10.2.152.33 - flash_player = 10.2.154.13 - flash_player = 10.2.154.25 - flash_player <= 10.2.157.51 - flash_player = 10.1.105.6 - flash_player = 10.1.106.16 - flash_player = 10.2.156.12 published: '2011-05-13' updated: '2026-06-23' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2011-0627' references: - url: 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html' label: psirt@adobe.com - url: 'http://www.adobe.com/support/security/bulletins/apsb11-12.html' label: psirt@adobe.com - url: >- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13914 label: psirt@adobe.com - url: >- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16053 label: psirt@adobe.com - url: 'http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.adobe.com/support/security/bulletins/apsb11-12.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13914 label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16053 label: af854a3a-2127-422b-91ae-364da2661108 tags: - nvd - in-the-wild epss: 0.05107 epssPercentile: 0.92021 exploited: true ingestedAt: '2026-06-29T13:24:33.115Z' --- ## Overview Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file. ## Affected - `flash_player <= 10.2.159.1` - `flash_player = 6.0.21.0` - `flash_player = 6.0.79` - `flash_player = 7.0` - `flash_player = 7.0.1` - `flash_player = 7.0.14.0` - `flash_player = 7.0.19.0` - `flash_player = 7.0.24.0` - `flash_player = 7.0.25` - `flash_player = 7.0.53.0` - `flash_player = 7.0.60.0` - `flash_player = 7.0.61.0` - `flash_player = 7.0.63` - `flash_player = 7.0.66.0` - `flash_player = 7.0.67.0` - `flash_player = 7.0.68.0` - `flash_player = 7.0.69.0` - `flash_player = 7.0.70.0` - `flash_player = 7.0.73.0` - `flash_player = 7.1` - `flash_player = 7.1.1` - `flash_player = 7.2` - `flash_player = 8.0` - `flash_player = 8.0.22.0` - `flash_player = 8.0.24.0` - `flash_player = 8.0.33.0` - `flash_player = 8.0.34.0` - `flash_player = 8.0.35.0` - `flash_player = 8.0.39.0` - `flash_player = 8.0.42.0` - `flash_player = 9.0` - `flash_player = 9.0.16` - `flash_player = 9.0.18d60` - `flash_player = 9.0.20` - `flash_player = 9.0.20.0` - `flash_player = 9.0.28` - `flash_player = 9.0.28.0` - `flash_player = 9.0.31` - `flash_player = 9.0.31.0` - `flash_player = 9.0.45.0` - `flash_player = 9.0.47.0` - `flash_player = 9.0.48.0` - `flash_player = 9.0.112.0` - `flash_player = 9.0.114.0` - `flash_player = 9.0.115.0` - `flash_player = 9.0.124.0` - `flash_player = 9.0.125.0` - `flash_player = 9.0.151.0` - `flash_player = 9.0.152.0` - `flash_player = 9.0.155.0` - `flash_player = 9.0.159.0` - `flash_player = 9.0.246.0` - `flash_player = 9.0.260.0` - `flash_player = 9.0.262.0` - `flash_player = 9.0.277.0` - `flash_player = 9.0.283.0` - `flash_player = 9.125.0` - `flash_player = 10.0.0.584` - `flash_player = 10.0.12.10` - `flash_player = 10.0.12.36` - `flash_player = 10.0.15.3` - `flash_player = 10.0.22.87` - `flash_player = 10.0.32.18` - `flash_player = 10.0.42.34` - `flash_player = 10.0.45.2` - `flash_player = 10.1.52.14.1` - `flash_player = 10.1.52.15` - `flash_player = 10.1.53.64` - `flash_player = 10.1.82.76` - `flash_player = 10.1.85.3` - `flash_player = 10.1.92.8` - `flash_player = 10.1.92.10` - `flash_player = 10.1.95.1` - `flash_player = 10.1.95.2` - `flash_player = 10.1.102.64` - `flash_player = 10.2.152` - `flash_player = 10.2.152.32` - `flash_player = 10.2.152.33` - `flash_player = 10.2.154.13` - `flash_player = 10.2.154.25` - `flash_player <= 10.2.157.51` - `flash_player = 10.1.105.6` - `flash_player = 10.1.106.16` - `flash_player = 10.2.156.12` ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges.