Macromedia Shockwave Flash Plugin — known CVE vulnerabilities

Every CVE whose affected-product data names Macromedia Shockwave Flash Plugin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2001-0166 — CVSS 7.6 (high): Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length…
• CVE-1999-1525 — CVSS 5.1 (medium): Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the…
• CVE-1999-1526 — CVSS 5.0 (medium): Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.