VDB
GHSA-f836-847g-vm3c
GHSA-f836-847g-vm3c
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Record from GitHub Advisory Database · Published May 14, 2022
Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
Risk scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Timeline
- May 14, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-f836-847g-vm3c
vulnetix vdb fixes GHSA-f836-847g-vm3c
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-f836-847g-vm3c/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-2138 advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html url
- http://www.redhat.com/support/errata/RHSA-2011-1144.html url
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14085 url
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html url
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html url
- http://www.adobe.com/support/security/bulletins/apsb11-21.html url
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16104 url
- http://secunia.com/advisories/48308 url
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html url