Every CVESearch/Get API key

CVE-2012-1535

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and...

7.8 HighIn KEVPublic exploit

CVE-2012-1535 is a high vulnerability (CVSS 7.8) in Adobe Flash Player, published August 15, 2012. CISA lists it as known to be exploited, since March 3, 2022. EUVD reports exploitation since March 3, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 70.4%, the 99th percentile. No source names a fixed version.

What does this mean?
Severity
7.8 HighCVSS 3.1, NVD
Exploit chance
70.4%EPSS, 99th percentile
Exploitation
ExploitedCISA KEV,
Fixed in
No fix listedNo source names one

Description

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

70.4%Down 20.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-plugin
Red Hat:rhel_extras:6
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el6
0:11.2.202.238-1.el6
flash-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el5
0:11.2.202.238-1.el5
flash-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 8 CVEs
before 0:11.2.202.238-1.el5
0:11.2.202.238-1.el5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitAdobe Flash Player 11.3 Kern Table Parsing Integer Overflow2012-08-09
Exploit-DBAdobe Flash Player 11.3 - Font Parsing Code Execution (Metasploit)2012-08-20

What each source reports

NVD Score used7.8

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Record
CVE-2012-1535
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-20, CWE-94
Updated
2026-11-02
CVE List7.8

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Record
CVE-2012-1535
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94, CWE-20
Updated
2026-11-02
EUVDEUVD-2012-15537.8

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Record
EUVD-2012-1553
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5876-f5vv-fv9w7.8

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and...

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Record
GHSA-5876-f5vv-fv9w
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
CISA KEVNo score

Adobe Flash Player Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.

Record
CVE-2012-1535
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 37 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open