CVE-2011-2107

no score yetEPSS 3.6%

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-06-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_reader
adobe:flash_player

References

http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
http://secunia.com/advisories/44846
http://secunia.com/advisories/44847
http://secunia.com/advisories/44871
http://secunia.com/advisories/44872

Check your stack JSON