CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 11–20 of 33 records

CVE Vendor Product Added Due Status
CVE-2015-0310 — Adobe Flash Player ASLR Bypass Vulnerability
Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.
Adobe Flash Player May 25, 2022 Jun 15, 2022
CVE-2015-8651 — Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player allows attackers to execute code.
Adobe Flash Player May 25, 2022 Jun 15, 2022
CVE-2018-5002 — Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.
Adobe Flash Player May 23, 2022 Jun 13, 2022
CVE-2014-9163 — Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-0311 — Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-0313 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-3113 — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-5122 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2015-5123 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Adobe Flash Player Apr 13, 2022 May 4, 2022
CVE-2012-2034 — Adobe Flash Player Memory Corruption Vulnerability
Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).
Adobe Flash Player Mar 28, 2022 Apr 18, 2022