Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2013-0643 — Adobe Flash Player Incorrect Default Permissions Vulnerability
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
|
Adobe | Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
|
CVE-2013-0648 — Adobe Flash Player Code Execution Vulnerability
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.
|
Adobe | Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
|
CVE-2014-0497 — Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
|
Adobe | Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
|
CVE-2014-0502 — Adobe Flash Player Double Free Vulnerablity
Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.
|
Adobe | Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
|
CVE-2024-34102 — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
|
Adobe | Commerce and Magento Open Source | Jul 17, 2024 | Aug 7, 2024 | |
|
CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
|
Adobe | ColdFusion | Jan 8, 2024 | Jan 29, 2024 | Ransomware |
|
CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
|
Adobe | ColdFusion | Jan 8, 2024 | Jan 29, 2024 | Ransomware |
|
CVE-2023-21608 — Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
|
Adobe | Acrobat and Reader | Oct 10, 2023 | Oct 31, 2023 | |
|
CVE-2023-26369 — Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
|
Adobe | Acrobat and Reader | Sep 14, 2023 | Oct 5, 2023 | |
|
CVE-2023-26359 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
|
Adobe | ColdFusion | Aug 21, 2023 | Sep 11, 2023 |
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
Flash Player · Sep 17, 2024
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.
Flash Player · Sep 17, 2024
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
Flash Player · Sep 17, 2024
Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.
Flash Player · Sep 17, 2024
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
Commerce and Magento Open Source · Jul 17, 2024
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
ColdFusion · Jan 8, 2024
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
ColdFusion · Jan 8, 2024
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
Acrobat and Reader · Oct 10, 2023
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
Acrobat and Reader · Sep 14, 2023
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
ColdFusion · Aug 21, 2023