VULNERABILITY INTELLIGENCE
CVE-2011-2458
CVSS score9.3 HIGH
EPSS probability3.60%
CISA KEVNot currently listed
Published2011-11-11
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
Primary references
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Patch, Vendor Advisory
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory