AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-4401

HIGH · CVSS 10 EPSS 7.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-10-17 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.

CVE
CVE-2008-4401
Severity
HIGH
CVSS
10
EPSS
7.15%

Original NVD Description

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.