Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Flash Player

Security incidents tagged Flash Player. Newest first.

0 Flash Player incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
0
Days without an incident
765
Longest quiet run: 765 days (Sep 18–Oct 22)
Show 1 older incident

September 2024 1

  • HighAdobe Flash Player: 4 actively exploited vulnerabilities

    Adobe Flash Player No patch yet

    CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2013-0648: Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2014-0497: Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CVE-2014-0502: Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. Added to the CISA KEV catalog on 2024-09-17. CVE-2013-0643, CVE-2013-0648, CVE-2014-0497, CVE-2014-0502 were assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2013-0643 · CVE-2013-0648 · CVE-2014-0497 +1