{"schema_version":"1","data":[{"id":2977,"advisory_id":"64c9542c-e601-4423-8f80-ca0497d2cdcd","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4878","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:27:02.2116+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2018-4878"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-4878","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-4878","aliases":["CVE-2018-4878"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-4878","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878","dueDate":"2022-05-03","product":"Flash Player","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-4878","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2885,"advisory_id":"f402c5d9-0cee-409d-9b0e-07e488026d27","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15982","source_published_at":"2022-02-15T00:00:00+00:00","published_at":"2026-10-24T21:26:06.563308+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2018-15982"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-15982","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-15982","aliases":["CVE-2018-15982"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-15982","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","dueDate":"2022-08-15","product":"Flash Player","dateAdded":"2022-02-15","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-15982","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2862,"advisory_id":"64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0611","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:52.119481+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2011-0611"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0611","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0611","aliases":["CVE-2011-0611"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2011-0611","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0611","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2858,"advisory_id":"e16ddae3-e97a-4ff6-9f57-96d9316a61ff","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:49.37981+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2012-1535"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-1535","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1535","aliases":["CVE-2012-1535"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1535","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-1535","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2838,"advisory_id":"a075aeac-7bbc-4a62-87b5-087dde07b722","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:34.443913+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-3043"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3043","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3043","aliases":["CVE-2015-3043"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2015-3043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2837,"advisory_id":"272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:33.217963+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-5119"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5119","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5119","aliases":["CVE-2015-5119"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-5119","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5119","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2835,"advisory_id":"68007609-a143-40a4-b4a1-410c33da2831","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:31.450473+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-7645"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-7645","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-7645","aliases":["CVE-2015-7645"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-7645","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-7645","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2834,"advisory_id":"98ddb752-cd45-4d40-b317-9771d3b8d8b9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:30.676156+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2016-1019"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-1019","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-1019","aliases":["CVE-2016-1019"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-1019","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-1019","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2832,"advisory_id":"5bb062a9-3b27-496b-a4d0-35ee7e17bccb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4117","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:29.125124+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2016-4117"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4117","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4117","aliases":["CVE-2016-4117"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4117","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-4117","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2829,"advisory_id":"e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7855","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:26.593334+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2016-7855"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7855","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7855","aliases":["CVE-2016-7855"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7855","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2825,"advisory_id":"655ebcb3-fdb5-4c03-8aa9-959972889dea","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11292","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:22.973374+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2017-11292"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Type Confusion Vulnerability","summary":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2017-11292","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-11292","aliases":["CVE-2017-11292"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2017-11292","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-11292","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2726,"advisory_id":"4a833ab2-b950-45f4-a962-6733357b31b5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7892","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:36.344934+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2016-7892"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7892","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7892","aliases":["CVE-2016-7892"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7892","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7892","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2724,"advisory_id":"f7df6803-2b63-4cce-a956-863675149f36","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4171","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:34.884708+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2016-4171"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4171","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4171","aliases":["CVE-2016-4171"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4171","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4171","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2684,"advisory_id":"bab65c74-0c32-4fec-8755-56fe5964bd36","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2034","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:28.842247+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2012-2034"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-2034","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-2034","aliases":["CVE-2012-2034"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2012-2034","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034","dueDate":"2022-04-18","product":"Flash Player","dateAdded":"2022-03-28","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-2034","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2631,"advisory_id":"4e53ac54-9771-438b-afe3-d82b1722e876","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:56.720836+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2014-9163"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","summary":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-9163","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-9163","aliases":["CVE-2014-9163"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2014-9163","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-9163","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2630,"advisory_id":"2b208131-3b97-4c8c-8608-7edc5fa17ba5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0311","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:55.976158+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-0311"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0311","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0311","aliases":["CVE-2015-0311"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-0311","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0311","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2629,"advisory_id":"49c00f18-85cc-49f8-9f27-83de07bfd888","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0313","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:55.408219+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-0313"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0313","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0313","aliases":["CVE-2015-0313"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-0313","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0313","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2628,"advisory_id":"599e48f5-57ea-4458-88f1-65d30b5bf4bd","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3113","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:54.83255+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-3113"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","summary":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3113","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3113","aliases":["CVE-2015-3113"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-3113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2625,"advisory_id":"7e22d403-d7de-46fe-b3da-652f48a957e4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5122","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:53.065758+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-5122"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5122","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5122","aliases":["CVE-2015-5122"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5122","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5122","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2624,"advisory_id":"98fe9f8a-36bf-4383-a5d4-0305a6d2467a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5123","source_published_at":"2022-04-13T00:00:00+00:00","published_at":"2026-10-24T21:21:52.311755+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-5123"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5123","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5123","aliases":["CVE-2015-5123"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5123","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5123","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2592,"advisory_id":"c6e5b701-0589-4767-ae72-0d9252f4027b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5002","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:30.940769+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2018-5002"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","summary":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-5002","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-5002","aliases":["CVE-2018-5002"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-5002","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002","dueDate":"2022-06-13","product":"Flash Player","dateAdded":"2022-05-23","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-5002","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2536,"advisory_id":"86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8439","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:08.285298+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2014-8439"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","summary":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-8439","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-8439","aliases":["CVE-2014-8439"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2014-8439","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-8439","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2532,"advisory_id":"07fe0dcd-ae5f-4d61-9b61-467a68d74052","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:05.952593+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-8651"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Integer overflow in Adobe Flash Player allows attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-8651","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-8651","aliases":["CVE-2015-8651"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2015-8651","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Integer overflow in Adobe Flash Player allows attackers to execute code.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-8651","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2525,"advisory_id":"b83c98f0-6f42-4d57-ade9-c6c0b061ae40","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0310","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:01.152276+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2015-0310"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player ASLR Bypass Vulnerability","summary":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0310","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0310","aliases":["CVE-2015-0310"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-0310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2509,"advisory_id":"6bc66b1d-7b3f-44ef-bd4a-10c35c337327","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:51.47264+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2010-1297"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2010-1297","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-1297","aliases":["CVE-2010-1297"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2010-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2507,"advisory_id":"3f2cdfa5-0180-439c-8951-520a2265ca73","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:50.302296+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2011-0609"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Unspecified Vulnerability","summary":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0609","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0609","aliases":["CVE-2011-0609"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2011-0609","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0609","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2503,"advisory_id":"844992f2-fc43-47ea-a01f-cf936e5069d1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:47.711999+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2012-0754"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0754","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0754","aliases":["CVE-2012-0754"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2012-0754","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0754","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2501,"advisory_id":"9d69bcc9-3dc0-4644-a6c8-a0422a851fff","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0767","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:46.553789+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2012-0767"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","summary":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0767","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0767","aliases":["CVE-2012-0767"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-79"],"cveID":"CVE-2012-0767","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0767","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1499,"advisory_id":"4a9845c8-e73a-474d-b84f-3063cde1c613","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5054","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:13.20015+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2012-5054"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-5054","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-5054","aliases":["CVE-2012-5054"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2012-5054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-5054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1086,"advisory_id":"651356bd-617a-48a6-acb1-5e85e6bf7a86","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0497","source_published_at":"2024-09-17T00:00:00+00:00","published_at":"2026-10-24T20:56:23.039586+00:00","extraction_method":"structured","technologies":["core-kev","flash-player"],"cve_ids":["CVE-2014-0497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Underflow Vulnerablity","summary":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","evidence":"kev:CVE-2014-0497","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0497","aliases":["CVE-2014-0497"],"affected":[],"modified":"2024-09-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-191"],"cveID":"CVE-2014-0497","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","dueDate":"2024-10-08","product":"Flash Player","dateAdded":"2024-09-17","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0497","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":2977,"next_before":1086}