CVE-2012-5054VulnerabilityPublished 06/08/2022Updated 10/24/2026
CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability
Affects Adobe Flash PlayerSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 06/08/2022
- KEV deadline
- 06/22/2022
- EPSS
- 21.2% chance of exploitation in 30 days – higher than 97% of CVEs
What to do
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
Description
Adobe Flash Player has an integer overflow vulnerability (CVE-2012-5054) that enables remote attackers to execute arbitrary code by supplying malformed arguments. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.