CVE-2020-9746
Exploitable NULL pointer deref could lead to arbitrary code execution
CVE-2020-9746 is a high vulnerability (CVSS 7.0) in Adobe Flash Player, published October 14, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.25%, the 91st percentile. Fixed in flash-player-plugin 32.0.0.445-1.mga7.nonfree.
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Exploitable NULL pointer deref could lead to arbitrary code execution
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
- Record
CVE-2020-9746- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2020-30526
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
- Record
EUVD-2020-30526- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h82h-rg57-cr4v No score
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer...
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
- Record
GHSA-h82h-rg57-cr4v- Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
- Record
CVE-2020-9746- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVRHSA-2020:4251
Red Hat Security Advisory: flash-plugin security update
- Record
RHSA-2020:4251- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-9746
Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.
- Record
UBUNTU-CVE-2020-9746- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0386 No score
Updated flash-player-plugin package fixes security vulnerability
NULL Pointer Dereference that leads to arbitrary code execution in the context of the current user. (CVE-2020-9746)
- Record
MGASA-2020-0386- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:7 |
before 32.0.0.445-1.mga7.nonfree | 32.0.0.445-1.mga7.nonfree |
flash-pluginRed Hat:rhel_extras:6 |
before 0:32.0.0.445-1.el6_10 | 0:32.0.0.445-1.el6_10 |
flashplugin-nonfreeUbuntu:16.04:LTS |
before 32.0.0.445ubuntu0.16.04.1, plus listed versions 11.2.202.540ubuntu211.2.202.548ubuntu111.2.202.554ubuntu111.2.202.559ubuntu111.2.202.569ubuntu1 Show 45 moreShow less11.2.202.577ubuntu111.2.202.616ubuntu111.2.202.621ubuntu0.16.04.111.2.202.626ubuntu0.16.04.111.2.202.632ubuntu0.16.04.111.2.202.635ubuntu0.16.04.111.2.202.637ubuntu0.16.04.111.2.202.643ubuntu0.16.04.111.2.202.644ubuntu0.16.04.124.0.0.186ubuntu0.16.04.124.0.0.194ubuntu0.16.04.124.0.0.221ubuntu0.16.04.125.0.0.127ubuntu0.16.04.125.0.0.148ubuntu0.16.04.125.0.0.171ubuntu0.16.04.126.0.0.126ubuntu0.16.04.126.0.0.131ubuntu0.16.04.126.0.0.137ubuntu0.16.04.126.0.0.151ubuntu0.16.04.127.0.0.130ubuntu0.16.04.127.0.0.159ubuntu0.16.04.127.0.0.170ubuntu0.16.04.127.0.0.183ubuntu0.16.04.127.0.0.187ubuntu0.16.04.128.0.0.126ubuntu0.16.04.128.0.0.137ubuntu0.16.04.128.0.0.161ubuntu0.16.04.129.0.0.113ubuntu0.16.04.129.0.0.140ubuntu0.16.04.129.0.0.171ubuntu0.16.04.130.0.0.113ubuntu0.16.04.130.0.0.134ubuntu0.16.04.130.0.0.154ubuntu0.16.04.131.0.0.108ubuntu0.16.04.131.0.0.122ubuntu0.16.04.131.0.0.148ubuntu0.16.04.131.0.0.153ubuntu0.16.04.132.0.0.101ubuntu0.16.04.132.0.0.114ubuntu0.16.04.132.0.0.142ubuntu0.16.04.132.0.0.156ubuntu0.16.04.132.0.0.171ubuntu0.16.04.132.0.0.192ubuntu0.16.04.132.0.0.207ubuntu0.16.04.132.0.0.223ubuntu0.16.04.1 |
32.0.0.445ubuntu0.16.04.1 |
flashplugin-nonfreeUbuntu:18.04:LTS |
before 32.0.0.445ubuntu0.18.04.1, plus listed versions 27.0.0.170ubuntu127.0.0.187ubuntu128.0.0.126ubuntu128.0.0.137ubuntu128.0.0.161ubuntu1 Show 33 moreShow less28.0.0.161ubuntu228.0.0.161ubuntu329.0.0.113ubuntu129.0.0.140ubuntu129.0.0.171ubuntu130.0.0.113ubuntu0.18.04.130.0.0.134ubuntu0.18.04.130.0.0.154ubuntu0.18.04.131.0.0.108ubuntu0.18.04.131.0.0.122ubuntu0.18.04.131.0.0.148ubuntu0.18.04.131.0.0.153ubuntu0.18.04.132.0.0.101ubuntu0.18.04.132.0.0.114ubuntu0.18.04.132.0.0.142ubuntu0.18.04.132.0.0.156ubuntu0.18.04.132.0.0.171ubuntu0.18.04.132.0.0.192ubuntu0.18.04.132.0.0.207ubuntu0.18.04.132.0.0.223ubuntu0.18.04.132.0.0.238ubuntu0.18.04.132.0.0.255ubuntu0.18.04.132.0.0.270ubuntu0.18.04.132.0.0.293ubuntu0.18.04.132.0.0.303ubuntu0.18.04.232.0.0.314ubuntu0.18.04.132.0.0.330ubuntu0.18.04.132.0.0.344ubuntu0.18.04.132.0.0.363ubuntu0.18.04.132.0.0.371ubuntu0.18.04.132.0.0.387ubuntu0.18.04.132.0.0.403ubuntu0.18.04.132.0.0.414ubuntu0.18.04.1 |
32.0.0.445ubuntu0.18.04.1 |
flashplugin-nonfreeUbuntu:20.04:LTS |
before 32.0.0.445ubuntu0.20.04.1, plus listed versions 32.0.0.255ubuntu132.0.0.293ubuntu132.0.0.303ubuntu132.0.0.303ubuntu232.0.0.314ubuntu1 Show 8 moreShow less32.0.0.330ubuntu132.0.0.344ubuntu132.0.0.344ubuntu232.0.0.363ubuntu132.0.0.371ubuntu0.20.04.132.0.0.387ubuntu0.20.04.132.0.0.403ubuntu0.20.04.132.0.0.414ubuntu0.20.04.1 |
32.0.0.445ubuntu0.20.04.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | CVE List, EUVD, GitHub Advisories, NVD, OSV |
References
Left out here: 13 versions. The JSON record has them.