Adobe Flash Player For Mac <= 29.0.0.113 (apsb18-08)

  1. Flash Player For Mac Downloads
  2. Flash Player For Mac Update
  3. Adobe Flash Player For Mac
  4. Flash Player For Mac
  5. Adobe Flash Player

Adobe Flash Player for Mac is the high performance, lightweight, highly expressive component that delivers powerful and consistent user experiences across various versions of the Mac OS, different browsers, and countless mobile devices.

Release Notes for Flash Player 30 and AIR 30

Welcome to the Flash Player and AIR 30 release notes!

August 14, 2018

In today's scheduled release, we've updated Flash Player with important bug fixes and security updates.

July 10, 2018

In today's scheduled release, we've updated Flash Player with important bug fixes and security updates.

June 7, 2018

In today's scheduled release, we've updated Flash Player and AIR with important bug fixes, security updates, and new features.


How to update Flash Player

Current Flash Player customers who have enrolled in the 'Allow Adobe to install updates (recommended)' update mechanism will be automatically updated to the latest version of Flash Player within 24 hours after release.

Users who have selected 'Notify me to install updates' will receive an update notification dialog within 7 days from release date. Please note that Windows users will need to restart their system or log out and in to activate the update notification dialog.

The latest version of Flash Player can always be downloaded and installed by simply visiting https://get.adobe.com/flashplayer

Customers using Google Chrome or Windows 8.x/10 Internet Explorer or Microsoft Edge will receive updates through the Google and Microsoft update mechanisms.


How to contact us

We hope you enjoy this release. If you encounter any problems, please let us know by posting issues to our public bug database. For installation or usage help, please visit our community forums for assistance.

Adobe Bug Database - https://tracker.adobe.com/
Flash Player Forums - http://forums.adobe.com/community/flashplayer
AIR Forums - http://forums.adobe.com/community/air

Adobe will be unpublishing the shared AIR Runtime from the Google Play Store for all devices running Android 4.0 or below on March 13th, 2018. AIR applications that require the shared runtime will not be able to be able to access the required download from the Play Store from these older systems. We recommend impacted developers convert and republish their applications to use the captive runtime before March 13th.
App Transport Security
With macOS 10.11, Apple has introduced App Transport Security (ATS) which mandates that applications use secure network connections over HTTPS only. Because this is a significant change, Apple has provided applications an override via NSAllowsArbitraryLoads which will allow insecure connections.
With AIR SDK 27, all AIR applications built for macOS will automatically have the NSAllowsArbitraryLoads key set as true in their info.plist file. This is a temporary solution. Apple may reject your application during the review process or disable the usage of NSAllowsArbitraryLoads in future OS updates. We recommend using secure network connections over HTTPS in your applications.
Android AIR Shared Runtime
Starting with AIR 26, packaging of shared runtime applications for Android has been disabled. With this change, published applications will always have a captive copy of the runtime included in their installation package irrespective of the target the developer has selected (that is, apkor apk-captive-runtime). This change allows us to focus our testing and engineering on captive installations, by far the most popular option for Android.
AIR tvOS Support Moved to Labs
To help focus our testing on the most popular platforms, we've decided to move tvOS support back to the AIR beta channel. The functionality remains the same and developers can download the latest SDK over at https://labs.adobe.com
Flash Player 'Click to Play' Microsoft Office Support
Starting with Flash Player 30, existing “click to play” functionality for Microsoft Office version 2007 and earlier now applies to all Microsoft Office versions where Flash is allowed to run.

August 14, 2018

  • Flash Player quits unexpectedly when changing the audio output through system sound panel (FP-4198866)
  • Assorted security and functional fixes

July 10, 2018

Flash Player

  • Assorted security and functional fixes

June 7, 2018

Flash Player

  • Host cannot promote Participants into Host or Presenter role in a Connect Meeting.

Flash Player For Mac Downloads

AIR

  • ETC2 with Alpha textures when used in starling are not rendered in Android
  • Apple store REJECTION - AIR SDK using non-public APIs (AIR-4198623)
  • Error installing ad-hoc application on device using ad-hoc provisioning
  • Error with App Upload to Apple app store for missing NSLocationAlwaysUsageDescription and NSLocationWhenInUseUsageDescription keys
  • ADT to correctly sign dynamic frameworks included packaged with iOS app (AIR-4198407)
  • Echo during video conference (AIR-4198549)
  • iphone8 and iphonex, map using atf the etc2 map will appear maze or color variegated.(AIR-4198515)
  • [Swift ANE] Dynamic framework signing issue
  • ATFViewer does not get launched.
  • Runtime.apk showing incorrect version on devices.
  • Packaging an application for iOS using dynamic framework gives NullPointerException when packaging with distribution certificate (AIR-4198408)
  • ADT to correctly sign dynamic frameworks included packaged with iOS app (AIR-4198407)
  • iOS app uploading to AppStore via iTunes shows WARNING ITMS-90722: 'Certificate Expired” ( AIR-4198649 ,AIR-4198650)

With AIR 30, the C++ Compiler has been upgraded to Standard C++14 in the AIR Runtime. For more information, please refer to https://isocpp.org/wiki/faq/cpp14.

Flash Player For Mac Update

For AIR 30, the NDK for Android has been upgraded to Android NDK, Revision 16b (December 2017). More information is available at https://developer.android.com/ndk/downloads/revision_history.

Significant changes have been made in the tools used to build the runtime, but this should not affect any functionality on Android or iOS. If you encounter any performance or functional issues, please raise them on the AIR developer forums and our bug tracker.

In response to a class of recently disclosed vulnerabilities in popular CPU hardware related to data cache timing (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754), known popularly as Spectre and Meltdown, we are disabling the ‘shareable’ property of the ActionScript ByteArray class by default. Administrators can turn this feature back on using the following MMS properties:

EnableInsecureByteArrayShareable

Short Description:
Allows Administrators to override the Flash Player 30 and above default behavior of restricting the “shareable” property of the ActionScript ByteArray API class.

Detailed Description:
EnableInsecureByteArrayShareable = [0,1] (0=false, 1=true)

This setting will allow Administrators to override the Flash Player 30 and above default behavior of restricting the “shareable” property of the ActionScript ByteArray API class. Shared ByteArrays are used to share data between threads with ActionScript “Workers.” Shared ByteArrays are an advanced feature of the ActionScript API set and not commonly used in the vast majority of published Flash content. For increased security, we recommend administrators leave this feature disabled.

EnableInsecureByteArrayShareableDomain

Short Description:
Allows Administrators to override the Flash Player 30 and above default behavior of restricting the “shareable” property of the ActionScript ByteArray API class on a per-domain basis.

Detailed Description:
EnableInsecureByteArrayShareableDomain = domain name or IP address

By default, Flash Player 30 and above will no longer allow the “shareable” property of the ActionScript ByteArray API class. The EnableInsecureByteArrayShareableDomain settings provide exceptions to that rule. Administrators can create a “white list” of approved domain names or IP addresses to which the EnableInsecureByteArrayShareable setting will apply. If the active security context is in the list of domains and IP addresses, then access to the sharable ByteArray property will be allowed. Otherwise, sharable ByteArray access will be denied.

For domain names, prefixing a * wildcard is allowed. For example, *.adobe.com would allow all Flash content with the “shareable” property to run on www.adobe.com, get.adobe.com, helpx.adobe.com, and so on. Wildcards are not allowed when specifying IP addresses.

For example, the following settings allow SWFs using the shareable ByteArray property to only run on servers at www.mydomain.com and 10.1.1.10:

EnableInsecureByteArrayShareableDomain=www.mydomain.com
EnableInsecureByteArrayShareableDomain=10.1.1.10

For domain names, prefixing a * wildcard is allowed.

Example:

EnableInsecureByteArrayShareableDomain=*.mydomain.com

This would allow all Flash content with the “shareable” property to run on www.mydomain.com, foo.mydomain.com, and so on. Wildcards are not allowed when specifying IP addresses.

EventJitterMicroseconds

Setting this value to 0 disables an important mitigation for Spectre and Meltdown (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754) style attacks, but may improve application performance in some limited circumstances.

TimerJitterMicroseconds

Setting this value to 0 disables an important mitigation for Spectre and Meltdown (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754) style attacks, but may improve application performance in some limited circumstances.

For information on managing the mms.cfg file, please see the Flash Player System Administrator's guide, here: http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html

Adobe Flash Player For Mac

Note:

For a full list of features in Flash Player and AIR, including features introduced in previous releases, please review the document here

DeliverableReleased Version
Flash Player Windows for Internet Explorer - ActiveX30.0.0.154
Flash Player Windows for Firefox - NPAPI30.0.0.154
Flash Player Windows for Chromium - PPAPI30.0.0.154
Flash Player Mac for Safari and Firefox - NPAPI30.0.0.154
Flash Player Mac for Chromium - PPAPI30.0.0.154
Flash Player Win 8 & 10 for Internet Explorer & Edge30.0.0.154
Flash Player Mac for Google Chrome30.0.0.154
Flash Player Windows for Google Chrome 30.0.0.154
Flash Player ChromeOS30.0.0.154
Flash Player Linux for Google Chrome30.0.0.154
Flash Player Linux for Chromium - PPAPI30.0.0.154
Flash Player Linux for Firefox - NPAPI30.0.0.154
AIR Desktop Win Runtime30.0.0.107
AIR Desktop Mac Runtime30.0.0.107
AIR SDK & Compiler Windows30.0.0.107
AIR SDK & Compiler Mac30.0.0.107
AIR SDK Windows30.0.0.107
AIR SDK Mac30.0.0.107
  • ETC2 with Alpha content having LZMA/JPEG-XR compressions have black dots/lines when rendered on Android
  • ETC2 Non Alpha ATF are not rendered in ADL
  • StageWebView is not able to load punycoded URLs

Flash Player

  • Video created using authplay produces jagged-edge-shapes if stage-color is ignored
  • Audio output from Firefox is from a separate container in the volume mixer instead of browser
Security BulletinImpacted Deliverables
APSB18-25Adobe Flash Player

Authoring for Flash Player 30

To use the new Flash Player, you will need to target SWF version 41 by passing '-swf-version=41' as an extra compiler argument to the ASC 2.0 compiler. Detailed directions are below.

  • Download the new playerglobal.swc for Flash Player 30
  • Download and install Flash Builder 4.7 from Creative Cloud: https://creative.adobe.com/products/flash-builder
  • Backup the existing AIR SDK if you need to restore it later then replace the bundled AIR SDK with the AIR 30 SDK. To do this, unzip the AIR 30 SDK to this location:
    • MacOS: /Applications/Adobe Flash Builder 4.7/eclipse/plugins/com.adobe.flash.compiler_4.7.0.348297/AIRSDK
    • Windows: C:Program FilesAdobeAdobe Flash Builder 4.7 (64Bit)eclipsepluginscom.adobe.flash.compiler_4.7.0.349722AIRSDK
  • In Flash Builder, create a new project: File -> New -> project.
  • Open the project Properties panel (right-click and chose 'Properties').
  • Select ActionScriptCompiler from the list on the left.
  • Add '-swf-version=41' to the 'Additional compiler arguments' field.
    • This ensures the outputted SWF targets SWF version 41. If you compile on the command-line and not in Flash Builder, you need to add the same compiler argument.
  • Ensure you have installed the new Flash Player 30 build in your browser.

Flash Player For Mac

Adobe flash player

Authoring for AIR 30Update to the AIR 30 namespace

Adobe Flash Player

You must update your application descriptor file to the 30 namespace in order to access the new AIR 30 APIs and behavior. If your application does not require the new AIR 30 APIs and behavior, you are not required to update the namespace. However, we recommend all users start using the AIR 30 namespace even if you are not yet taking advantage of the new 30 capabilities. To update the namespace, change the xmlns attribute in your application descriptor to: <application xmlns='http://ns.adobe.com/air/application/30.0'>

Found a bug? Please submit a bug to the Flash Player and Adobe AIR bug database.

Flash Player and AIR may leverage your graphics hardware to decode and play H.264 video. There may be video issues that can only be reproduced with your particular graphics hardware and driver. When reporting an issue involving video, it is essential to note your graphics hardware and driver, along with your operating system and browser (when using Flash Player), so that we can reproduce and investigate issues. Please be sure to include this information as described in Instructions for Reporting Video Playback Issues. Note: Due to the high volume of email we receive, we are unable to respond to every request.

Thank you for using Adobe® Flash Player® and AIR® and for taking the time to send us your feedback!

For the latest Flash Player system requirements please review the document here

For the latest AIR system requirements please review the document here

Release DateRuntime VersionSecurity Enhancements
August 14, 2018Flash Player (Win, Mac, Linux) 30.0.0.154APSB18-25
July 10, 2018Flash Player (Win, Mac, Linux) 30.0.0.134APSB18-24
June 7, 2018Flash Player (Win, Mac, Linux) 30.0.0.113
AIR Runtime 30.0.0.107
AIR SDK 30.0.0.107
APSB18-19
May 8, 2018Flash Player (Win, Mac, Linux) 29.0.0.171APSB18-16
April 13, 2018AIR SDK 29.0.0.122
April 10, 2018Flash Player (Win, Mac, Linux) 29.0.0.140APSB18-08
March 13, 2018Flash Player (Win, Mac, Linux) 29.0.0.113
AIR Runtime 29.0.0.112
AIR SDK 29.0.0.112
APSB18-05
February 6, 2018Flash Player (Win, Mac, Linux) 28.0.0.161APSB18-03
January 9, 2018Flash Player (Win, Mac, Linux) 28.0.0.137APSB18-01
December 12, 2017Flash Player (Win, Mac, Linux) 28.0.0.126
AIR Runtime 28.0.0.127
AIR SDK 28.0.0.125
APSB17-42
November 14, 2017Flash Player (Win, Mac, Linux) 27.0.0.187APSB17-33
October 25, 2017Flash Player (Win, Mac, Linux) 27.0.0.183
October 16, 2017Flash Player (Win, Mac, Linux) 27.0.0.170APSB17-32
October 10, 2017Flash Player (Win, Mac, Linux) 27.0.0.159
AIR SDK Win 27.0.0.132
APSB17-31
September 12, 2017Flash Player (Win, Mac, Linux) 27.0.0.130
AIR SDK and Runtime Win 27.0.0.124
AIR SDK and Runtime Mac 27.0.0.128
APSB17-28
August 8, 2017Flash Player (Win, Mac, Linux) 26.0.0.151APSB17-23
July 11, 2017Flash Player (Win, Mac, Linux) 26.0.0.137
AIR Runtime 26.0.0.127
APSB17-21
June 16, 2017Flash Player (Win, Mac, Linux) 26.0.0.131
June 13, 2017Flash Player (Win, Mac, Linux) 26.0.0.126
Flash Player (ActiveX Win 8/10) 26.0.0.120
AIR SDK and Runtime 26.0.0.118
APSB17-17
May 9, 2017Flash Player (Win, Mac, Linux) 25.0.0.171APSB17-15
April 20, 2017Flash Player (Mac) 25.0.0.163
April 11, 2017Flash Player (Win, Mac, Linux) 25.0.0.148APSB17-10
March 14, 2017Flash Player (Win, Mac, Linux) 25.0.0.127
AIR SDK and Runtime 25.0.0.134
APSB17-07
February 14, 2017Flash Player (Win, Mac, Linux) 24.0.0.221APSB17-04
January 10, 2017Flash Player (Win, Mac, Linux) 24.0.0.194APSB17-02
December 13, 2016Flash Player (Win, Mac, Linux) 24.0.0.186
AIR SDK and Runtime 24.0.0.180
APSB16-39
November 8, 2016Flash Player (Win, Mac, Linux) 23.0.0.207
Flash Player (NPAPI Linux) 11.2.202.644
APSB16-37
October 26, 2016Flash Player (Win, Mac, Linux) 23.0.0.205
Flash Player (NPAPI Linux) 11.2.202.643
APSB16-36
October 11, 2016Flash Player (Win, Mac, Linux) 23.0.0.185
Flash Player (NPAPI Linux) 11.2.202.637
Flash Player (ESR) 18.0.0.382
APSB16-32
September 13, 2016Flash Player (Win, Mac, Linux) 23.0.0.162
Flash Player (NPAPI Linux) 11.2.202.635
Flash Player (ESR) 18.0.0.375
AIR SDK and Runtime 23.0.0.257
APSB16-29
APSB16-31
July 14, 2016Flash Player (Win ActiveX) 22.0.0.210
July 12, 2016Flash Player (Win, Mac, Linux) 22.0.0.209
Flash Player (NPAPI Linux) 11.2.202.632
Flash Player (ESR) 18.0.0.366
APSB16-25
June 16, 2016Flash Player (Win, Mac, Linux) 22.0.0.185
Flash Player (NPAPI Linux) 11.2.202.626
Flash Player (ESR) 18.0.0.358
AIR SDK and Runtime 22.0.0.153
APSB16-18
APSB16-23
May 12, 2016Flash Player (Win, Mac, Linux) 21.0.0.242
Flash Player (NPAPI Linux) 11.2.202.621
Flash Player (ESR) 18.0.0.352
AIR SDK and Runtime 21.0.0.215
APSB16-15
April 21, 2016Flash Player (Mac NPAPI) 21.0.0.226
April 12, 2016AIR SDK and Runtime 21.0.0.198
April 8, 2016Flash Player (Google Chrome) 21.0.0.216
April 7, 2016Flash Player (Win, Mac, Linux) 21.0.0.213
Flash Player (NPAPI Linux) 11.2.202.616
Flash Player (ESR) 18.0.0.343
APSB16-10
March 23, 2016Flash Player (Win, Mac, Linux) 21.0.0.197
March 10, 2016Flash Player (Win, Mac, Linux) 21.0.0.182
Flash Player (NPAPI Linux) 11.2.202.577
Flash Player (ESR) 18.0.0.333
AIR SDK and Runtime 21.0.0.176
APSB16-08
February 9, 2016Flash Player (Win, Mac, Linux) 20.0.0.306
Flash Player (NPAPI Linux) 11.2.202.569
Flash Player (ESR) 18.0.0.329
AIR SDK and Runtime 20.0.0.260
APSB16-04
January 19, 2016Flash Player (Win, Mac, Linux) 20.0.0.286
January 1, 2015Flash Player ActiveX (Win 7) 20.0.0.270
December 28, 2015Flash Player (Win, Mac, Linux) 20.0.0.267
Flash Player (NPAPI Linux) 11.2.202.559
Flash Player (ESR) 18.0.0.324
AIR SDK and Runtime 20.0.0.233
APSB16-01
December 8, 2015Flash Player (Win, Mac, Linux) 20.0.0.228
Flash Player (NPAPI Win & Mac) 20.0.0.235
Flash Player (NPAPI Linux) 11.2.202.554
Flash Player (ESR) 18.0.0.268
AIR SDK and Runtime 20.0.0.204
APSB15-32
November 10, 2015Flash Player (Win, Mac, Linux) 19.0.0.245
Flash Player (NPAPI Linux) 11.2.202.548
Flash Player (ESR) 18.0.0.261
AIR SDK and Runtime 19.0.0.241
APSB15-28
October 16, 2015Flash Player (Win, Mac, Linux) 19.0.0.226
Flash Player (PPAPI ChromeOS) 19.0.0.225
Flash Player (NPAPI Linux) 11.2.202.540
Flash Player (ESR) 18.0.0.255
APSB15-27
October 13, 2015Flash Player (Win & Mac) 19.0.0.207
Flash Player (PPAPI Linux) 19.0.0.207
Flash Player (NPAPI Linux) 11.2.202.535
Flash Player (ESR) 18.0.0.252
AIR SDK and Runtime 19.0.0.190
APSB15-25
September 21, 2015Flash Player (Win & Mac) 19.0.0.185
Flash Player (PPAPI Linux) 19.0.0.185
Flash Player (NPAPI Linux) 11.2.202.521
Flash Player (ESR) 18.0.0.241
AIR SDK and Runtime 19.0.0.190
APSB15-23
August 11, 2015Flash Player (Win & Mac) 18.0.0.232
Flash Player (PPAPI Linux) 18.0.0.233
Flash Player (Linux) 11.2.202.498
Flash Player (ESR) 18.0.0.228
AIR SDK and Runtime 18.0.0.199
APSB15-19
July 16, 2015Flash Player (Linux NPAPI) 11.2.202.491
Flash Player (ESR) 13.0.0.309
APSB15-18
July 14, 2015Flash Player 18.0.0.209
APSB15-18
July 8, 2015Flash Player 18.0.0.203
Flash Player (PPAPI Linux) 18.0.0.204
Flash Player (ESR) 13.0.0.302
Flash Player (Linux NPAPI) 11.2.202.481
Flash Player 17.0.0.191
AIR SDK and Runtime 18.0.0.180
APSB15-16
June 23, 2015Flash Player 18.0.0.194
Flash Player (ESR) 13.0.0.296
Flash Player (Linux NPAPI) 11.2.202.468
Flash Player 17.0.0.190
APSB15-14
June 9, 2015Flash Player (Win & Mac) 18.0.0.160
Flash Player PPAPI (Mac) 18.0.0.161
Flash Player (Linux) 11.2.202.466
Flash Player (ESR) 13.0.0.292
AIR SDK and Runtime (Win) 18.0.0.144
AIR SDK and Runtime (Mac) 18.0.0.143
APSB15-11
May 12, 2015Flash Player (Win & Mac) 17.0.0.188
Flash Player (Linux) 11.2.202.460
Flash Player (ESR) 13.0.0.289
AIR SDK and Runtime 17.0.0.172
APSB15-09
April 14, 2015Flash Player (Win & Mac) 17.0.0.169
Flash Player (Linux) 11.2.202.457
Flash Player (ESR) 13.0.0.281
AIR SDK and Runtime 17.0.0.144
APSB15-06
March 12, 2015Flash Player (Win & Mac) 17.0.0.134
Flash Player (Linux) 11.2.202.451
Flash Player (ESR) 13.0.0.277
AIR SDK and Runtime 17.0.0.124
APSB15-05
February 12, 2015AIR Desktop Runtime (Win) 16.0.0.273
AIR SDK (Win & Mac) 16.0.0.292
February 5, 2015Flash Player (Win & Mac) 16.0.0.305
Flash Player (Linux) 11.2.202.442
Flash Player ESR (Win & Mac) 13.0.0.269
APSB15-04
January 27, 2015Flash Player (Win & Mac) 16.0.0.296
Flash Player (Linux) 11.2.202.440
Flash Player ESR (Win & Mac) 13.0.0.264
APSB15-03
January 22, 2015Flash Player (Win & Mac) 16.0.0.287
Flash Player (Linux) 11.2.202.438
Flash Player ESR (Win & Mac) 13.0.0.262
APSB15-02
Janurary 13, 2015Flash Player (Win & Mac) 16.0.0.257
Flash Player (Linux) 11.2.202.429
Flash Player ESR (Win & Mac) 13.0.0.260
AIR Android 16.0.0.272
AIR Desktop Runtime 16.0.0.245
AIR SDK 16.0.0.272
APSB15-01
December 9th, 2014Flash Player (Win & Mac) 16.0.0.235
Flash Player (Linux) 11.2.202.425
Flash Player ESR (Win & Mac) 13.0.0.259
APSB14-27
December 9th, 2014Flash Player (Win & Mac) 15.0.0.246APSB14-27
November 11th, 2014Flash Player (Win & Mac) 15.0.0.223
Flash Player (Linux) 11.2.202.418
Flash Player ESR (Win & Mac) 13.0.0.252
AIR Android 15.0.0.356
AIR Desktop & SDK 15.0.0.356
APSB14-24
September 23rd, 2014Flash Player (Windows ActiveX) 15.0.0.167APSB14-22
September 9th, 2014Flash Player (Win & Mac) 15.0.0.152
Flash Player (Linux) 11.2.202.406
Flash Player ESR (Win & Mac) 13.0.0.244
AIR Android 15.0.0.252
AIR Desktop & SDK 15.0.0.249
APSB14-21
August 12th, 2014Flash Player (ActiveX, Mac NPAPI) 14.0.0.176
Flash Player (Win NPAPI) 14.0.0.179
Flash Player (PPAPI) 14.0.0.177
AIR Android 14.0.0.179
AIR Desktop & SDK 14.0.0.178
APSB14-18
July 8th, 2014Flash Player Desktop (Win & Mac) 14.0.0.145
Flash Player Desktop (Linux) 11.2.202.394
Flash Player ESR (Win & Mac) 13.0.0.231
AIR (SDK & Android Runtime) 14.0.0.137
APSB14-17
June 10th, 2014Flash Player Desktop (Win & Mac) 14.0.0.125
Flash Player Desktop (Linux) 11.2.202.378
Flash Player ESR (Mac & Win) 13.0.0.223
AIR (SDK & Runtime) 14.0.0.110
APSB14-16
May 13th, 2014Flash Player Desktop (Win & Mac) 13.0.0.214
Flash Player Desktop (Linux) 11.2.202.359
Flash Player Enterprise (Mac & Win) 13.0.0.214
AIR (SDK & Runtime) 13.0.0.111
APSB14-14

Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices | Online Privacy Policy

ID CVE-2018-4937
SummaryAdobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
References
Vulnerable Configurations
  • Adobe Flash Player Desktop Runtime 29.0.0.113
    cpe:2.3:a:adobe:flash_player_desktop_runtime:29.0.0.113
  • Apple Mac OS X
  • Linux Kernel
    cpe:2.3:o:linux:linux_kernel
  • Microsoft Windows
  • Adobe Flash Player 29.0.0.113 for Chrome
    cpe:2.3:a:adobe:flash_player:29.0.0.113:-:-:-:-:chrome
  • Apple Mac OS X
  • Google Chrome OS
    cpe:2.3:o:google:chrome_os
  • Linux Kernel
  • Microsoft Windows
    cpe:2.3:o:microsoft:windows
  • Adobe Flash Player 29.0.0.113 for Edge
    cpe:2.3:a:adobe:flash_player:29.0.0.113:-:-:-:-:edge
  • cpe:2.3:o:microsoft:windows_10
  • cpe:2.3:o:microsoft:windows_8.1
    cpe:2.3:o:microsoft:windows_8.1
  • Adobe Flash Player 29.0.0.113 for Internet Explorer 11
    cpe:2.3:a:adobe:flash_player:29.0.0.113:-:-:-:-:internet_explorer_11
  • cpe:2.3:o:microsoft:windows_10
  • cpe:2.3:o:microsoft:windows_8.1
    cpe:2.3:o:microsoft:windows_8.1
CVSS
Base: 10.0
Impact:
Exploitability:
CWECWE-787
CAPEC
exploit-db via4
descriptionAdobe Flash - Out-of-Bounds Write in blur Filtering. CVE-2018-4937. Dos exploit for Multiple platform
fileexploits/multiple/dos/44529.txt
idEDB-ID:44529
last seen2018-05-24
modified2018-04-24
platformmultiple
port
published2018-04-24
reporterExploit-DB
source
titleAdobe Flash - Out-of-Bounds Write in blur Filtering
typedos
nessus via4
  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_FLASH_PLAYER_APSB18-08.NASL
    descriptionThe version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 29.0.0.113.It is therefore affected by multiple vulnerabilities.
    last seen2019-02-21
    modified2018-05-10
    plugin id108959
    published2018-04-10
    reporterTenable
    source
    titleAdobe Flash Player for Mac <= 29.0.0.113 (APSB18-08)
  • NASL familyFreeBSD Local Security Checks
    NASL idFREEBSD_PKG_5C6F74823CED11E8B1576451062F0F7A.NASL
    descriptionAdobe reports :- This update resolves a use-after-free vulnerability that could lead to remote code execution (CVE-2018-4932).- This update resolves out-of-bounds read vulnerabilities that could lead to information disclosure (CVE-2018-4933, CVE-2018-4934).- This update resolves out-of-bounds write vulnerabilities that could lead to remote code execution (CVE-2018-4935, CVE-2018-4937).- This update resolves a heap overflow vulnerability that could lead to information disclosure (CVE-2018-4936).
    last seen2019-02-21
    modified2018-11-10
    plugin id108979
    published2018-04-11
    reporterTenable
    source
    titleFreeBSD : Flash Player -- multiple vulnerabilities (5c6f7482-3ced-11e8-b157-6451062f0f7a)
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-201804-11.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-201804-11 (Adobe Flash Player: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, disclose sensitive information or bypass security restrictions. Workaround : There is no known workaround at this time.
    last seen2019-02-21
    modified2018-09-04
    plugin id109007
    published2018-04-12
    reporterTenable
    source
    titleGLSA-201804-11 : Adobe Flash Player: Multiple vulnerabilities
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-1119.NASL
    descriptionAn update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.This update upgrades Flash Player to version 29.0.0.140.Security Fix(es) :* flash-plugin: Remote Code Execution vulnerabilities (APSB18-08) (CVE-2018-4932, CVE-2018-4935, CVE-2018-4937)* flash-plugin: Information Disclosure vulnerabilities (APSB18-08) (CVE-2018-4933, CVE-2018-4934, CVE-2018-4936)For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2019-02-21
    modified2018-11-10
    plugin id109009
    published2018-04-12
    reporterTenable
    source
    titleRHEL 6 : flash-plugin (RHSA-2018:1119)
  • NASL familyWindows
    NASL idFLASH_PLAYER_APSB18-08.NASL
    descriptionThe version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 29.0.0.113. It is therefore affected by multiple vulnerabilities.
    last seen2019-02-21
    modified2018-05-10
    plugin id108958
    published2018-04-10
    reporterTenable
    source
    titleAdobe Flash Player <= 29.0.0.113 (APSB18-08)
  • NASL familyWindows : Microsoft Bulletins
    NASL idSMB_NT_MS18_APR_4093110.NASL
    descriptionThe remote Windows host is missing security update KB4093110. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player.
    last seen2019-02-21
    modified2018-05-10
    plugin id108962
    published2018-04-10
    reporterTenable
    source
    titleKB4093110: Security update for Adobe Flash Player (April 2018)
redhat via4
advisories
rhsa
idRHSA-2018:1119
refmap via4
bid103708
exploit-db44529
gentooGLSA-201804-11
misc
sectrack1040648
Last major update19-05-2018 - 13:29
Published19-05-2018 - 13:29
Last modified07-03-2019 - 15:15