CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 28, 2026, 3:10 PM ET)

What this means for you

This week: 3,217 CVEs published, 242 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,217; Show in the list
Critical, last 7 days: 242; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,760; Show in the list

Showing CVEs that name the product adobe:flash_player. Show all products

36 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2018-15982 Known exploited	High 7.8	Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Assigned by adobe	Jan 18, 2019
CVE-2018-5002 Known exploited	High 7.8	Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Assigned by adobe	Jul 9, 2018
CVE-2018-4878 Known exploited	High 7.8	A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. Assigned by adobe	Feb 6, 2018
CVE-2017-11292 Known exploited	High 8.8	Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. Assigned by adobe	Oct 21, 2017
CVE-2016-7892 Known exploited	High 8.8	Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Assigned by adobe	Dec 15, 2016
CVE-2016-7855 Known exploited	High 8.8	Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as… Assigned by adobe	Nov 1, 2016
CVE-2016-4171 Known exploited	High 7.8	Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. Assigned by adobe	Jun 16, 2016
CVE-2016-4117 Known exploited	High 7.8	Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. Assigned by adobe	May 10, 2016
CVE-2016-1019 Known exploited	High 7.8	Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild… Assigned by adobe	Apr 7, 2016
CVE-2016-1010 Known exploited	High 8.8	Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK befor… Assigned by adobe	Mar 12, 2016

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.