CVE-2006-4640
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote...
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
- Record
CVE-2006-4640- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
- Record
CVE-2006-4640- Updated
- 2026-11-02
EUVDEUVD-2006-4628 No score
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
- Record
EUVD-2006-4628- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5hcm-mrf5-hq6x No score
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote...
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
- Record
GHSA-5hcm-mrf5-hq6x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4640 is a medium vulnerability (CVSS 6.8) in Adobe Flash Player, published September 12, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.7%, the 95th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/3573
secunia.com/advisories/22054
osvdb.org/28734
us-cert.gov/cas/techalerts/TA06-318A.html
securityfocus.com/bid/19980
Show 15 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/28887
lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
novell.com/linux/security/advisories/2006_53_flashplayer.html
kb.cert.org/vuls/id/168372
adobe.com/support/security/bulletins/apsb06-11.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069
nvd.nist.gov/vuln/detail/CVE-2006-4640
github.com/advisories/GHSA-5hcm-mrf5-hq6x