CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–10 of 33 records

CVE Vendor Product Added Due Status
CVE-2013-0643 — Adobe Flash Player Incorrect Default Permissions Vulnerability
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
Adobe Flash Player Sep 17, 2024 Oct 8, 2024
CVE-2013-0648 — Adobe Flash Player Code Execution Vulnerability
Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.
Adobe Flash Player Sep 17, 2024 Oct 8, 2024
CVE-2014-0497 — Adobe Flash Player Integer Underflow Vulnerablity
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
Adobe Flash Player Sep 17, 2024 Oct 8, 2024
CVE-2014-0502 — Adobe Flash Player Double Free Vulnerablity
Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.
Adobe Flash Player Sep 17, 2024 Oct 8, 2024
CVE-2010-1297 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2011-0609 — Adobe Flash Player Unspecified Vulnerability
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-0754 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-0767 — Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2012-5054 — Adobe Flash Player Integer Overflow Vulnerability
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
Adobe Flash Player Jun 8, 2022 Jun 22, 2022
CVE-2014-8439 — Adobe Flash Player Dereferenced Pointer Vulnerability
Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.
Adobe Flash Player May 25, 2022 Jun 15, 2022