Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2018-5002

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-5002

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-5002
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2592 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:30 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Dereferenced Pointer Vulnerability

Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2014-8439

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-8439

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-8439
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2536 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:08 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Integer Overflow Vulnerability

Integer overflow in Adobe Flash Player allows attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-8651

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-8651

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-8651
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2532 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:05 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player ASLR Bypass Vulnerability

Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-0310

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-0310

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-0310
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2525 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:01 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2010-1297

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-1297

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2010-1297
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2509 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:51 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Unspecified Vulnerability

Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2011-0609

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2011-0609

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2011-0609
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2507 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:50 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Memory Corruption Vulnerability

Flash Player CVE-2012-0754

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0754

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-0754
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2503 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:47 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2012-0767

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0767

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-0767
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2501 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:46 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Integer Overflow Vulnerability

Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2012-5054

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-5054

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-5054
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1499 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:03:13 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Integer Underflow Vulnerablity

Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Flash Player CVE-2014-0497

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-0497

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-0497
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1086 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:23 GMT
Publisher date: Tue, 17 Sep 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Code Execution Vulnerability

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Flash Player CVE-2013-0648

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-0648

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-0648
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1083 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:21 GMT
Publisher date: Tue, 17 Sep 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Incorrect Default Permissions Vulnerability

Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Flash Player CVE-2013-0643

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-0643

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-0643
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1082 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:20 GMT
Publisher date: Tue, 17 Sep 2024 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Double Free Vulnerablity

Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Flash Player CVE-2014-0502

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-0502

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-0502
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1081 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:56:19 GMT
Publisher date: Tue, 17 Sep 2024 00:00:00 GMT

Read the original announcement