VULNERABILITY INTELLIGENCE
CVE-2009-1870
CVSS score4.9 MEDIUM
EPSS probability0.77%
CISA KEVNot currently listed
Published2009-07-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N
Description
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor