CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 31–33 of 33 records

CVE Vendor Product Added Due Status
CVE-2017-11292 — Adobe Flash Player Type Confusion Vulnerability
Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.
 Adobe Flash Player Mar 3, 2022 Mar 24, 2022
CVE-2018-15982 — Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
 Adobe Flash Player Feb 15, 2022 Aug 15, 2022 Ransomware
CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.
 Adobe Flash Player Nov 3, 2021 May 3, 2022 Ransomware