CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 41–50 of 82 records

CVE Vendor Product Added Due Status
CVE-2016-0984 — Adobe Flash Player and AIR Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
 Adobe Flash Player and AIR May 25, 2022 Jun 15, 2022
CVE-2016-1010 — Adobe Flash Player and AIR Integer Overflow Vulnerability
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
 Adobe Flash Player and AIR May 25, 2022 Jun 15, 2022
CVE-2018-5002 — Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
 Adobe Flash Player May 23, 2022 Jun 13, 2022
CVE-2014-9163 — Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-0311 — Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-0313 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-3113 — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-5122 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-5123 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
 Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2012-2034 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).
 Adobe Flash Player Mar 28, 2022 Apr 18, 2022