Skip to main content
CVE-2011-0611VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2011-0611: Adobe Flash Player Remote Code Execution Vulnerability

Affects Adobe Flash PlayerSource CISA KEV

Severity
High

No CVSS score published yet

Exploitation

Actively exploited – in CISA KEV since 03/03/2022

KEV deadline
03/24/2022
EPSS
99.4% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

The impacted product is end-of-life and should be disconnected if still in use.

Description

Adobe Flash Player contains a remote code execution vulnerability that can be triggered by crafted Flash content. This flaw also allows attackers to cause a denial of service by crashing the application. The vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information are provided in the input data.

Weaknesses

References

Track Adobe Flash Player with alerts and the API. See plans

Added 10/24/2026 · analysed 10/24/2026 · updated 10/24/2026