Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2018-4878

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-4878

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-4878
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2977 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:27:02 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2018-15982

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-15982

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-15982
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2885 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:06 GMT
Publisher date: Tue, 15 Feb 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Remote Code Execution Vulnerability

Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2011-0611

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2011-0611

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2011-0611
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2862 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:52 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2012-1535

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-1535

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-1535
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2858 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:49 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Memory Corruption Vulnerability

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-3043

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-3043

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-3043
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2838 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:34 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-5119

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-5119

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-5119
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2837 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:33 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-7645

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-7645

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-7645
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2835 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:31 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2016-1019

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-1019

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-1019
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2834 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:30 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Arbitrary Code Execution Vulnerability

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2016-4117

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-4117

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-4117
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2832 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:29 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2016-7855

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-7855

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-7855
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2829 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:26 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Type Confusion Vulnerability

Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2017-11292

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2017-11292

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2017-11292
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2825 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:22 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2016-7892

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-7892

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-7892
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2726 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:36 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2016-4171

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-4171

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-4171
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2724 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:34 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2012-2034

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-2034

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-2034
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2684 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:28 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2014-9163

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-9163

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-9163
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2631 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:56 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-0311

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-0311

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-0311
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2630 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:55 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-0313

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-0313

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-0313
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2629 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:55 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-3113

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-3113

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-3113
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2628 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:54 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-5122

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-5122

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-5122
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2625 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:53 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Flash Player CVE-2015-5123

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-5123

Flash Player

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-5123
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2624 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:52 GMT
Publisher date: Wed, 13 Apr 2022 00:00:00 GMT

Read the original announcement

Older events