{"schema_version":"2","view":"grouped","data":[{"id":2973,"cve_ids":["CVE-2018-4878"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-4878","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-4878","aliases":["CVE-2018-4878"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-4878","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878","dueDate":"2022-05-03","product":"Flash Player","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-4878","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64c9542c-e601-4423-8f80-ca0497d2cdcd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4878","advisory_id":"64c9542c-e601-4423-8f80-ca0497d2cdcd","event_types":["advisory"],"published_at":"2026-10-24T21:27:02.2116+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A64c9542c-e601-4423-8f80-ca0497d2cdcd","group":{"id":"advisory:64c9542c-e601-4423-8f80-ca0497d2cdcd","revision":1,"primary_event_id":2977,"change":"published","superseded_by":[],"changed":{"id":2977,"cve_ids":["CVE-2018-4878"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-4878","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-4878","aliases":["CVE-2018-4878"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-4878","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878","dueDate":"2022-05-03","product":"Flash Player","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-4878","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64c9542c-e601-4423-8f80-ca0497d2cdcd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4878","advisory_id":"64c9542c-e601-4423-8f80-ca0497d2cdcd","event_types":["advisory"],"published_at":"2026-10-24T21:27:02.2116+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/2977"},"members":[{"id":2977,"cve_ids":["CVE-2018-4878"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-4878","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-4878","aliases":["CVE-2018-4878"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-4878","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878","dueDate":"2022-05-03","product":"Flash Player","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-4878","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64c9542c-e601-4423-8f80-ca0497d2cdcd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4878","advisory_id":"64c9542c-e601-4423-8f80-ca0497d2cdcd","event_types":["advisory"],"published_at":"2026-10-24T21:27:02.2116+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/2977"}]}},{"id":2880,"cve_ids":["CVE-2018-15982"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-15982","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-15982","aliases":["CVE-2018-15982"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-15982","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","dueDate":"2022-08-15","product":"Flash Player","dateAdded":"2022-02-15","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-15982","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f402c5d9-0cee-409d-9b0e-07e488026d27","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15982","advisory_id":"f402c5d9-0cee-409d-9b0e-07e488026d27","event_types":["advisory"],"published_at":"2026-10-24T21:26:06.563308+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-15T00:00:00+00:00","detail_url":"/advisories/advisory%3Af402c5d9-0cee-409d-9b0e-07e488026d27","group":{"id":"advisory:f402c5d9-0cee-409d-9b0e-07e488026d27","revision":1,"primary_event_id":2885,"change":"published","superseded_by":[],"changed":{"id":2885,"cve_ids":["CVE-2018-15982"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-15982","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-15982","aliases":["CVE-2018-15982"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-15982","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","dueDate":"2022-08-15","product":"Flash Player","dateAdded":"2022-02-15","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-15982","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f402c5d9-0cee-409d-9b0e-07e488026d27","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15982","advisory_id":"f402c5d9-0cee-409d-9b0e-07e488026d27","event_types":["advisory"],"published_at":"2026-10-24T21:26:06.563308+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-15T00:00:00+00:00","detail_url":"/events/2885"},"members":[{"id":2885,"cve_ids":["CVE-2018-15982"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-15982","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-15982","aliases":["CVE-2018-15982"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2018-15982","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","dueDate":"2022-08-15","product":"Flash Player","dateAdded":"2022-02-15","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-15982","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f402c5d9-0cee-409d-9b0e-07e488026d27","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15982","advisory_id":"f402c5d9-0cee-409d-9b0e-07e488026d27","event_types":["advisory"],"published_at":"2026-10-24T21:26:06.563308+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-15T00:00:00+00:00","detail_url":"/events/2885"}]}},{"id":2857,"cve_ids":["CVE-2011-0611"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0611","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0611","aliases":["CVE-2011-0611"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2011-0611","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0611","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0611","advisory_id":"64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","event_types":["advisory"],"published_at":"2026-10-24T21:25:52.119481+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","group":{"id":"advisory:64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","revision":1,"primary_event_id":2862,"change":"published","superseded_by":[],"changed":{"id":2862,"cve_ids":["CVE-2011-0611"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0611","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0611","aliases":["CVE-2011-0611"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2011-0611","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0611","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0611","advisory_id":"64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","event_types":["advisory"],"published_at":"2026-10-24T21:25:52.119481+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2862"},"members":[{"id":2862,"cve_ids":["CVE-2011-0611"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0611","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0611","aliases":["CVE-2011-0611"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2011-0611","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0611","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0611","advisory_id":"64fb16df-59e4-4072-a5c5-e6bb0ad1ae1e","event_types":["advisory"],"published_at":"2026-10-24T21:25:52.119481+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2862"}]}},{"id":2853,"cve_ids":["CVE-2012-1535"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-1535","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1535","aliases":["CVE-2012-1535"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1535","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-1535","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e16ddae3-e97a-4ff6-9f57-96d9316a61ff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535","advisory_id":"e16ddae3-e97a-4ff6-9f57-96d9316a61ff","event_types":["advisory"],"published_at":"2026-10-24T21:25:49.37981+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Ae16ddae3-e97a-4ff6-9f57-96d9316a61ff","group":{"id":"advisory:e16ddae3-e97a-4ff6-9f57-96d9316a61ff","revision":1,"primary_event_id":2858,"change":"published","superseded_by":[],"changed":{"id":2858,"cve_ids":["CVE-2012-1535"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-1535","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1535","aliases":["CVE-2012-1535"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1535","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-1535","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e16ddae3-e97a-4ff6-9f57-96d9316a61ff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535","advisory_id":"e16ddae3-e97a-4ff6-9f57-96d9316a61ff","event_types":["advisory"],"published_at":"2026-10-24T21:25:49.37981+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2858"},"members":[{"id":2858,"cve_ids":["CVE-2012-1535"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-1535","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1535","aliases":["CVE-2012-1535"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1535","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-1535","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e16ddae3-e97a-4ff6-9f57-96d9316a61ff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1535","advisory_id":"e16ddae3-e97a-4ff6-9f57-96d9316a61ff","event_types":["advisory"],"published_at":"2026-10-24T21:25:49.37981+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2858"}]}},{"id":2831,"cve_ids":["CVE-2015-3043"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3043","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3043","aliases":["CVE-2015-3043"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2015-3043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a075aeac-7bbc-4a62-87b5-087dde07b722","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043","advisory_id":"a075aeac-7bbc-4a62-87b5-087dde07b722","event_types":["advisory"],"published_at":"2026-10-24T21:25:34.443913+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aa075aeac-7bbc-4a62-87b5-087dde07b722","group":{"id":"advisory:a075aeac-7bbc-4a62-87b5-087dde07b722","revision":1,"primary_event_id":2838,"change":"published","superseded_by":[],"changed":{"id":2838,"cve_ids":["CVE-2015-3043"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3043","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3043","aliases":["CVE-2015-3043"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2015-3043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a075aeac-7bbc-4a62-87b5-087dde07b722","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043","advisory_id":"a075aeac-7bbc-4a62-87b5-087dde07b722","event_types":["advisory"],"published_at":"2026-10-24T21:25:34.443913+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2838"},"members":[{"id":2838,"cve_ids":["CVE-2015-3043"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3043","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3043","aliases":["CVE-2015-3043"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2015-3043","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3043","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a075aeac-7bbc-4a62-87b5-087dde07b722","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3043","advisory_id":"a075aeac-7bbc-4a62-87b5-087dde07b722","event_types":["advisory"],"published_at":"2026-10-24T21:25:34.443913+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2838"}]}},{"id":2830,"cve_ids":["CVE-2015-5119"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5119","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5119","aliases":["CVE-2015-5119"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-5119","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5119","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","advisory_id":"272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","event_types":["advisory"],"published_at":"2026-10-24T21:25:33.217963+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","group":{"id":"advisory:272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","revision":1,"primary_event_id":2837,"change":"published","superseded_by":[],"changed":{"id":2837,"cve_ids":["CVE-2015-5119"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5119","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5119","aliases":["CVE-2015-5119"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-5119","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5119","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","advisory_id":"272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","event_types":["advisory"],"published_at":"2026-10-24T21:25:33.217963+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2837"},"members":[{"id":2837,"cve_ids":["CVE-2015-5119"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5119","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5119","aliases":["CVE-2015-5119"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-5119","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5119","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","advisory_id":"272f2251-56e9-4d63-b6b2-bbd6e58a1ef5","event_types":["advisory"],"published_at":"2026-10-24T21:25:33.217963+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2837"}]}},{"id":2828,"cve_ids":["CVE-2015-7645"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-7645","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-7645","aliases":["CVE-2015-7645"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-7645","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-7645","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:68007609-a143-40a4-b4a1-410c33da2831","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645","advisory_id":"68007609-a143-40a4-b4a1-410c33da2831","event_types":["advisory"],"published_at":"2026-10-24T21:25:31.450473+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A68007609-a143-40a4-b4a1-410c33da2831","group":{"id":"advisory:68007609-a143-40a4-b4a1-410c33da2831","revision":1,"primary_event_id":2835,"change":"published","superseded_by":[],"changed":{"id":2835,"cve_ids":["CVE-2015-7645"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-7645","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-7645","aliases":["CVE-2015-7645"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-7645","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-7645","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:68007609-a143-40a4-b4a1-410c33da2831","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645","advisory_id":"68007609-a143-40a4-b4a1-410c33da2831","event_types":["advisory"],"published_at":"2026-10-24T21:25:31.450473+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2835"},"members":[{"id":2835,"cve_ids":["CVE-2015-7645"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-7645","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-7645","aliases":["CVE-2015-7645"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-7645","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-7645","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:68007609-a143-40a4-b4a1-410c33da2831","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-7645","advisory_id":"68007609-a143-40a4-b4a1-410c33da2831","event_types":["advisory"],"published_at":"2026-10-24T21:25:31.450473+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2835"}]}},{"id":2827,"cve_ids":["CVE-2016-1019"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-1019","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-1019","aliases":["CVE-2016-1019"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-1019","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-1019","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98ddb752-cd45-4d40-b317-9771d3b8d8b9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019","advisory_id":"98ddb752-cd45-4d40-b317-9771d3b8d8b9","event_types":["advisory"],"published_at":"2026-10-24T21:25:30.676156+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A98ddb752-cd45-4d40-b317-9771d3b8d8b9","group":{"id":"advisory:98ddb752-cd45-4d40-b317-9771d3b8d8b9","revision":1,"primary_event_id":2834,"change":"published","superseded_by":[],"changed":{"id":2834,"cve_ids":["CVE-2016-1019"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-1019","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-1019","aliases":["CVE-2016-1019"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-1019","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-1019","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98ddb752-cd45-4d40-b317-9771d3b8d8b9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019","advisory_id":"98ddb752-cd45-4d40-b317-9771d3b8d8b9","event_types":["advisory"],"published_at":"2026-10-24T21:25:30.676156+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2834"},"members":[{"id":2834,"cve_ids":["CVE-2016-1019"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-1019","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-1019","aliases":["CVE-2016-1019"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-1019","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-1019","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98ddb752-cd45-4d40-b317-9771d3b8d8b9","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019","advisory_id":"98ddb752-cd45-4d40-b317-9771d3b8d8b9","event_types":["advisory"],"published_at":"2026-10-24T21:25:30.676156+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2834"}]}},{"id":2825,"cve_ids":["CVE-2016-4117"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4117","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4117","aliases":["CVE-2016-4117"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4117","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-4117","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bb062a9-3b27-496b-a4d0-35ee7e17bccb","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4117","advisory_id":"5bb062a9-3b27-496b-a4d0-35ee7e17bccb","event_types":["advisory"],"published_at":"2026-10-24T21:25:29.125124+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A5bb062a9-3b27-496b-a4d0-35ee7e17bccb","group":{"id":"advisory:5bb062a9-3b27-496b-a4d0-35ee7e17bccb","revision":1,"primary_event_id":2832,"change":"published","superseded_by":[],"changed":{"id":2832,"cve_ids":["CVE-2016-4117"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4117","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4117","aliases":["CVE-2016-4117"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4117","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-4117","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bb062a9-3b27-496b-a4d0-35ee7e17bccb","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4117","advisory_id":"5bb062a9-3b27-496b-a4d0-35ee7e17bccb","event_types":["advisory"],"published_at":"2026-10-24T21:25:29.125124+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2832"},"members":[{"id":2832,"cve_ids":["CVE-2016-4117"],"payload":{"kind":"advisory","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","summary":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4117","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4117","aliases":["CVE-2016-4117"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4117","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-4117","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bb062a9-3b27-496b-a4d0-35ee7e17bccb","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4117","advisory_id":"5bb062a9-3b27-496b-a4d0-35ee7e17bccb","event_types":["advisory"],"published_at":"2026-10-24T21:25:29.125124+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2832"}]}},{"id":2822,"cve_ids":["CVE-2016-7855"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7855","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7855","aliases":["CVE-2016-7855"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7855","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7855","advisory_id":"e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","event_types":["advisory"],"published_at":"2026-10-24T21:25:26.593334+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Ae5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","group":{"id":"advisory:e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","revision":1,"primary_event_id":2829,"change":"published","superseded_by":[],"changed":{"id":2829,"cve_ids":["CVE-2016-7855"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7855","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7855","aliases":["CVE-2016-7855"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7855","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7855","advisory_id":"e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","event_types":["advisory"],"published_at":"2026-10-24T21:25:26.593334+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2829"},"members":[{"id":2829,"cve_ids":["CVE-2016-7855"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7855","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7855","aliases":["CVE-2016-7855"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7855","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7855","advisory_id":"e5e2dd2d-a37d-4744-9ad2-d1f1a4f98e7a","event_types":["advisory"],"published_at":"2026-10-24T21:25:26.593334+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2829"}]}},{"id":2818,"cve_ids":["CVE-2017-11292"],"payload":{"kind":"advisory","title":"Adobe Flash Player Type Confusion Vulnerability","summary":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2017-11292","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-11292","aliases":["CVE-2017-11292"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2017-11292","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-11292","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655ebcb3-fdb5-4c03-8aa9-959972889dea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11292","advisory_id":"655ebcb3-fdb5-4c03-8aa9-959972889dea","event_types":["advisory"],"published_at":"2026-10-24T21:25:22.973374+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A655ebcb3-fdb5-4c03-8aa9-959972889dea","group":{"id":"advisory:655ebcb3-fdb5-4c03-8aa9-959972889dea","revision":1,"primary_event_id":2825,"change":"published","superseded_by":[],"changed":{"id":2825,"cve_ids":["CVE-2017-11292"],"payload":{"kind":"advisory","title":"Adobe Flash Player Type Confusion Vulnerability","summary":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2017-11292","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-11292","aliases":["CVE-2017-11292"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2017-11292","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-11292","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655ebcb3-fdb5-4c03-8aa9-959972889dea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11292","advisory_id":"655ebcb3-fdb5-4c03-8aa9-959972889dea","event_types":["advisory"],"published_at":"2026-10-24T21:25:22.973374+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2825"},"members":[{"id":2825,"cve_ids":["CVE-2017-11292"],"payload":{"kind":"advisory","title":"Adobe Flash Player Type Confusion Vulnerability","summary":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2017-11292","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-11292","aliases":["CVE-2017-11292"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2017-11292","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292","dueDate":"2022-03-24","product":"Flash Player","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-11292","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655ebcb3-fdb5-4c03-8aa9-959972889dea","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-11292","advisory_id":"655ebcb3-fdb5-4c03-8aa9-959972889dea","event_types":["advisory"],"published_at":"2026-10-24T21:25:22.973374+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2825"}]}},{"id":2717,"cve_ids":["CVE-2016-7892"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7892","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7892","aliases":["CVE-2016-7892"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7892","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7892","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a833ab2-b950-45f4-a962-6733357b31b5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7892","advisory_id":"4a833ab2-b950-45f4-a962-6733357b31b5","event_types":["advisory"],"published_at":"2026-10-24T21:23:36.344934+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A4a833ab2-b950-45f4-a962-6733357b31b5","group":{"id":"advisory:4a833ab2-b950-45f4-a962-6733357b31b5","revision":1,"primary_event_id":2726,"change":"published","superseded_by":[],"changed":{"id":2726,"cve_ids":["CVE-2016-7892"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7892","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7892","aliases":["CVE-2016-7892"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7892","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7892","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a833ab2-b950-45f4-a962-6733357b31b5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7892","advisory_id":"4a833ab2-b950-45f4-a962-6733357b31b5","event_types":["advisory"],"published_at":"2026-10-24T21:23:36.344934+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2726"},"members":[{"id":2726,"cve_ids":["CVE-2016-7892"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-7892","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7892","aliases":["CVE-2016-7892"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2016-7892","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-7892","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a833ab2-b950-45f4-a962-6733357b31b5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7892","advisory_id":"4a833ab2-b950-45f4-a962-6733357b31b5","event_types":["advisory"],"published_at":"2026-10-24T21:23:36.344934+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2726"}]}},{"id":2715,"cve_ids":["CVE-2016-4171"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4171","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4171","aliases":["CVE-2016-4171"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4171","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4171","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f7df6803-2b63-4cce-a956-863675149f36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4171","advisory_id":"f7df6803-2b63-4cce-a956-863675149f36","event_types":["advisory"],"published_at":"2026-10-24T21:23:34.884708+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/advisories/advisory%3Af7df6803-2b63-4cce-a956-863675149f36","group":{"id":"advisory:f7df6803-2b63-4cce-a956-863675149f36","revision":1,"primary_event_id":2724,"change":"published","superseded_by":[],"changed":{"id":2724,"cve_ids":["CVE-2016-4171"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4171","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4171","aliases":["CVE-2016-4171"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4171","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4171","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f7df6803-2b63-4cce-a956-863675149f36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4171","advisory_id":"f7df6803-2b63-4cce-a956-863675149f36","event_types":["advisory"],"published_at":"2026-10-24T21:23:34.884708+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2724"},"members":[{"id":2724,"cve_ids":["CVE-2016-4171"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2016-4171","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-4171","aliases":["CVE-2016-4171"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2016-4171","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","dueDate":"2022-04-15","product":"Flash Player","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-4171","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f7df6803-2b63-4cce-a956-863675149f36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-4171","advisory_id":"f7df6803-2b63-4cce-a956-863675149f36","event_types":["advisory"],"published_at":"2026-10-24T21:23:34.884708+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-25T00:00:00+00:00","detail_url":"/events/2724"}]}},{"id":2675,"cve_ids":["CVE-2012-2034"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-2034","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-2034","aliases":["CVE-2012-2034"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2012-2034","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034","dueDate":"2022-04-18","product":"Flash Player","dateAdded":"2022-03-28","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-2034","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bab65c74-0c32-4fec-8755-56fe5964bd36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2034","advisory_id":"bab65c74-0c32-4fec-8755-56fe5964bd36","event_types":["advisory"],"published_at":"2026-10-24T21:22:28.842247+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/advisories/advisory%3Abab65c74-0c32-4fec-8755-56fe5964bd36","group":{"id":"advisory:bab65c74-0c32-4fec-8755-56fe5964bd36","revision":1,"primary_event_id":2684,"change":"published","superseded_by":[],"changed":{"id":2684,"cve_ids":["CVE-2012-2034"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-2034","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-2034","aliases":["CVE-2012-2034"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2012-2034","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034","dueDate":"2022-04-18","product":"Flash Player","dateAdded":"2022-03-28","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-2034","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bab65c74-0c32-4fec-8755-56fe5964bd36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2034","advisory_id":"bab65c74-0c32-4fec-8755-56fe5964bd36","event_types":["advisory"],"published_at":"2026-10-24T21:22:28.842247+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2684"},"members":[{"id":2684,"cve_ids":["CVE-2012-2034"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-2034","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-2034","aliases":["CVE-2012-2034"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2012-2034","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034","dueDate":"2022-04-18","product":"Flash Player","dateAdded":"2022-03-28","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-2034","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bab65c74-0c32-4fec-8755-56fe5964bd36","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-2034","advisory_id":"bab65c74-0c32-4fec-8755-56fe5964bd36","event_types":["advisory"],"published_at":"2026-10-24T21:22:28.842247+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2684"}]}},{"id":2621,"cve_ids":["CVE-2014-9163"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","summary":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-9163","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-9163","aliases":["CVE-2014-9163"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2014-9163","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-9163","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4e53ac54-9771-438b-afe3-d82b1722e876","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163","advisory_id":"4e53ac54-9771-438b-afe3-d82b1722e876","event_types":["advisory"],"published_at":"2026-10-24T21:21:56.720836+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A4e53ac54-9771-438b-afe3-d82b1722e876","group":{"id":"advisory:4e53ac54-9771-438b-afe3-d82b1722e876","revision":1,"primary_event_id":2631,"change":"published","superseded_by":[],"changed":{"id":2631,"cve_ids":["CVE-2014-9163"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","summary":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-9163","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-9163","aliases":["CVE-2014-9163"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2014-9163","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-9163","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4e53ac54-9771-438b-afe3-d82b1722e876","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163","advisory_id":"4e53ac54-9771-438b-afe3-d82b1722e876","event_types":["advisory"],"published_at":"2026-10-24T21:21:56.720836+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2631"},"members":[{"id":2631,"cve_ids":["CVE-2014-9163"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","summary":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-9163","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-9163","aliases":["CVE-2014-9163"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2014-9163","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-9163","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4e53ac54-9771-438b-afe3-d82b1722e876","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-9163","advisory_id":"4e53ac54-9771-438b-afe3-d82b1722e876","event_types":["advisory"],"published_at":"2026-10-24T21:21:56.720836+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2631"}]}},{"id":2620,"cve_ids":["CVE-2015-0311"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0311","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0311","aliases":["CVE-2015-0311"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-0311","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0311","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b208131-3b97-4c8c-8608-7edc5fa17ba5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0311","advisory_id":"2b208131-3b97-4c8c-8608-7edc5fa17ba5","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.976158+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A2b208131-3b97-4c8c-8608-7edc5fa17ba5","group":{"id":"advisory:2b208131-3b97-4c8c-8608-7edc5fa17ba5","revision":1,"primary_event_id":2630,"change":"published","superseded_by":[],"changed":{"id":2630,"cve_ids":["CVE-2015-0311"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0311","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0311","aliases":["CVE-2015-0311"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-0311","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0311","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b208131-3b97-4c8c-8608-7edc5fa17ba5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0311","advisory_id":"2b208131-3b97-4c8c-8608-7edc5fa17ba5","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.976158+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2630"},"members":[{"id":2630,"cve_ids":["CVE-2015-0311"],"payload":{"kind":"advisory","title":"Adobe Flash Player Remote Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0311","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0311","aliases":["CVE-2015-0311"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-0311","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0311","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b208131-3b97-4c8c-8608-7edc5fa17ba5","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0311","advisory_id":"2b208131-3b97-4c8c-8608-7edc5fa17ba5","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.976158+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2630"}]}},{"id":2619,"cve_ids":["CVE-2015-0313"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0313","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0313","aliases":["CVE-2015-0313"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-0313","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0313","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49c00f18-85cc-49f8-9f27-83de07bfd888","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0313","advisory_id":"49c00f18-85cc-49f8-9f27-83de07bfd888","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.408219+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A49c00f18-85cc-49f8-9f27-83de07bfd888","group":{"id":"advisory:49c00f18-85cc-49f8-9f27-83de07bfd888","revision":1,"primary_event_id":2629,"change":"published","superseded_by":[],"changed":{"id":2629,"cve_ids":["CVE-2015-0313"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0313","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0313","aliases":["CVE-2015-0313"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-0313","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0313","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49c00f18-85cc-49f8-9f27-83de07bfd888","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0313","advisory_id":"49c00f18-85cc-49f8-9f27-83de07bfd888","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.408219+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2629"},"members":[{"id":2629,"cve_ids":["CVE-2015-0313"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0313","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0313","aliases":["CVE-2015-0313"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-0313","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0313","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:49c00f18-85cc-49f8-9f27-83de07bfd888","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0313","advisory_id":"49c00f18-85cc-49f8-9f27-83de07bfd888","event_types":["advisory"],"published_at":"2026-10-24T21:21:55.408219+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2629"}]}},{"id":2618,"cve_ids":["CVE-2015-3113"],"payload":{"kind":"advisory","title":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","summary":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3113","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3113","aliases":["CVE-2015-3113"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-3113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:599e48f5-57ea-4458-88f1-65d30b5bf4bd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3113","advisory_id":"599e48f5-57ea-4458-88f1-65d30b5bf4bd","event_types":["advisory"],"published_at":"2026-10-24T21:21:54.83255+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A599e48f5-57ea-4458-88f1-65d30b5bf4bd","group":{"id":"advisory:599e48f5-57ea-4458-88f1-65d30b5bf4bd","revision":1,"primary_event_id":2628,"change":"published","superseded_by":[],"changed":{"id":2628,"cve_ids":["CVE-2015-3113"],"payload":{"kind":"advisory","title":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","summary":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3113","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3113","aliases":["CVE-2015-3113"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-3113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:599e48f5-57ea-4458-88f1-65d30b5bf4bd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3113","advisory_id":"599e48f5-57ea-4458-88f1-65d30b5bf4bd","event_types":["advisory"],"published_at":"2026-10-24T21:21:54.83255+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2628"},"members":[{"id":2628,"cve_ids":["CVE-2015-3113"],"payload":{"kind":"advisory","title":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","summary":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-3113","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-3113","aliases":["CVE-2015-3113"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-3113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-3113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:599e48f5-57ea-4458-88f1-65d30b5bf4bd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3113","advisory_id":"599e48f5-57ea-4458-88f1-65d30b5bf4bd","event_types":["advisory"],"published_at":"2026-10-24T21:21:54.83255+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2628"}]}},{"id":2615,"cve_ids":["CVE-2015-5122"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5122","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5122","aliases":["CVE-2015-5122"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5122","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5122","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7e22d403-d7de-46fe-b3da-652f48a957e4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5122","advisory_id":"7e22d403-d7de-46fe-b3da-652f48a957e4","event_types":["advisory"],"published_at":"2026-10-24T21:21:53.065758+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A7e22d403-d7de-46fe-b3da-652f48a957e4","group":{"id":"advisory:7e22d403-d7de-46fe-b3da-652f48a957e4","revision":1,"primary_event_id":2625,"change":"published","superseded_by":[],"changed":{"id":2625,"cve_ids":["CVE-2015-5122"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5122","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5122","aliases":["CVE-2015-5122"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5122","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5122","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7e22d403-d7de-46fe-b3da-652f48a957e4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5122","advisory_id":"7e22d403-d7de-46fe-b3da-652f48a957e4","event_types":["advisory"],"published_at":"2026-10-24T21:21:53.065758+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2625"},"members":[{"id":2625,"cve_ids":["CVE-2015-5122"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5122","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5122","aliases":["CVE-2015-5122"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5122","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5122","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7e22d403-d7de-46fe-b3da-652f48a957e4","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5122","advisory_id":"7e22d403-d7de-46fe-b3da-652f48a957e4","event_types":["advisory"],"published_at":"2026-10-24T21:21:53.065758+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2625"}]}},{"id":2614,"cve_ids":["CVE-2015-5123"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5123","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5123","aliases":["CVE-2015-5123"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5123","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5123","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98fe9f8a-36bf-4383-a5d4-0305a6d2467a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5123","advisory_id":"98fe9f8a-36bf-4383-a5d4-0305a6d2467a","event_types":["advisory"],"published_at":"2026-10-24T21:21:52.311755+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/advisories/advisory%3A98fe9f8a-36bf-4383-a5d4-0305a6d2467a","group":{"id":"advisory:98fe9f8a-36bf-4383-a5d4-0305a6d2467a","revision":1,"primary_event_id":2624,"change":"published","superseded_by":[],"changed":{"id":2624,"cve_ids":["CVE-2015-5123"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5123","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5123","aliases":["CVE-2015-5123"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5123","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5123","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98fe9f8a-36bf-4383-a5d4-0305a6d2467a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5123","advisory_id":"98fe9f8a-36bf-4383-a5d4-0305a6d2467a","event_types":["advisory"],"published_at":"2026-10-24T21:21:52.311755+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2624"},"members":[{"id":2624,"cve_ids":["CVE-2015-5123"],"payload":{"kind":"advisory","title":"Adobe Flash Player Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-5123","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-5123","aliases":["CVE-2015-5123"],"affected":[],"modified":"2022-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2015-5123","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123","dueDate":"2022-05-04","product":"Flash Player","dateAdded":"2022-04-13","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-5123","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:98fe9f8a-36bf-4383-a5d4-0305a6d2467a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5123","advisory_id":"98fe9f8a-36bf-4383-a5d4-0305a6d2467a","event_types":["advisory"],"published_at":"2026-10-24T21:21:52.311755+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-13T00:00:00+00:00","detail_url":"/events/2624"}]}},{"id":2582,"cve_ids":["CVE-2018-5002"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","summary":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-5002","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-5002","aliases":["CVE-2018-5002"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-5002","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002","dueDate":"2022-06-13","product":"Flash Player","dateAdded":"2022-05-23","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-5002","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c6e5b701-0589-4767-ae72-0d9252f4027b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5002","advisory_id":"c6e5b701-0589-4767-ae72-0d9252f4027b","event_types":["advisory"],"published_at":"2026-10-24T21:21:30.940769+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/advisories/advisory%3Ac6e5b701-0589-4767-ae72-0d9252f4027b","group":{"id":"advisory:c6e5b701-0589-4767-ae72-0d9252f4027b","revision":1,"primary_event_id":2592,"change":"published","superseded_by":[],"changed":{"id":2592,"cve_ids":["CVE-2018-5002"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","summary":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-5002","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-5002","aliases":["CVE-2018-5002"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-5002","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002","dueDate":"2022-06-13","product":"Flash Player","dateAdded":"2022-05-23","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-5002","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c6e5b701-0589-4767-ae72-0d9252f4027b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5002","advisory_id":"c6e5b701-0589-4767-ae72-0d9252f4027b","event_types":["advisory"],"published_at":"2026-10-24T21:21:30.940769+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2592"},"members":[{"id":2592,"cve_ids":["CVE-2018-5002"],"payload":{"kind":"advisory","title":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","summary":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2018-5002","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-5002","aliases":["CVE-2018-5002"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-5002","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002","dueDate":"2022-06-13","product":"Flash Player","dateAdded":"2022-05-23","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-5002","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c6e5b701-0589-4767-ae72-0d9252f4027b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-5002","advisory_id":"c6e5b701-0589-4767-ae72-0d9252f4027b","event_types":["advisory"],"published_at":"2026-10-24T21:21:30.940769+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2592"}]}},{"id":2524,"cve_ids":["CVE-2014-8439"],"payload":{"kind":"advisory","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","summary":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-8439","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-8439","aliases":["CVE-2014-8439"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2014-8439","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-8439","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8439","advisory_id":"86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","event_types":["advisory"],"published_at":"2026-10-24T21:20:08.285298+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","group":{"id":"advisory:86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","revision":1,"primary_event_id":2536,"change":"published","superseded_by":[],"changed":{"id":2536,"cve_ids":["CVE-2014-8439"],"payload":{"kind":"advisory","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","summary":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-8439","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-8439","aliases":["CVE-2014-8439"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2014-8439","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-8439","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8439","advisory_id":"86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","event_types":["advisory"],"published_at":"2026-10-24T21:20:08.285298+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2536"},"members":[{"id":2536,"cve_ids":["CVE-2014-8439"],"payload":{"kind":"advisory","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","summary":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2014-8439","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-8439","aliases":["CVE-2014-8439"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2014-8439","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-8439","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-8439","advisory_id":"86ba8e06-ea8d-45c2-b1da-eae57f8d65ba","event_types":["advisory"],"published_at":"2026-10-24T21:20:08.285298+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2536"}]}},{"id":2520,"cve_ids":["CVE-2015-8651"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Integer overflow in Adobe Flash Player allows attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-8651","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-8651","aliases":["CVE-2015-8651"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2015-8651","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Integer overflow in Adobe Flash Player allows attackers to execute code.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-8651","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07fe0dcd-ae5f-4d61-9b61-467a68d74052","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","advisory_id":"07fe0dcd-ae5f-4d61-9b61-467a68d74052","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.952593+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A07fe0dcd-ae5f-4d61-9b61-467a68d74052","group":{"id":"advisory:07fe0dcd-ae5f-4d61-9b61-467a68d74052","revision":1,"primary_event_id":2532,"change":"published","superseded_by":[],"changed":{"id":2532,"cve_ids":["CVE-2015-8651"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Integer overflow in Adobe Flash Player allows attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-8651","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-8651","aliases":["CVE-2015-8651"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2015-8651","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Integer overflow in Adobe Flash Player allows attackers to execute code.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-8651","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07fe0dcd-ae5f-4d61-9b61-467a68d74052","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","advisory_id":"07fe0dcd-ae5f-4d61-9b61-467a68d74052","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.952593+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2532"},"members":[{"id":2532,"cve_ids":["CVE-2015-8651"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Integer overflow in Adobe Flash Player allows attackers to execute code. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-8651","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-8651","aliases":["CVE-2015-8651"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2015-8651","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Integer overflow in Adobe Flash Player allows attackers to execute code.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-8651","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07fe0dcd-ae5f-4d61-9b61-467a68d74052","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","advisory_id":"07fe0dcd-ae5f-4d61-9b61-467a68d74052","event_types":["advisory"],"published_at":"2026-10-24T21:20:05.952593+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2532"}]}},{"id":2513,"cve_ids":["CVE-2015-0310"],"payload":{"kind":"advisory","title":"Adobe Flash Player ASLR Bypass Vulnerability","summary":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0310","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0310","aliases":["CVE-2015-0310"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-0310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b83c98f0-6f42-4d57-ade9-c6c0b061ae40","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0310","advisory_id":"b83c98f0-6f42-4d57-ade9-c6c0b061ae40","event_types":["advisory"],"published_at":"2026-10-24T21:20:01.152276+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/advisories/advisory%3Ab83c98f0-6f42-4d57-ade9-c6c0b061ae40","group":{"id":"advisory:b83c98f0-6f42-4d57-ade9-c6c0b061ae40","revision":1,"primary_event_id":2525,"change":"published","superseded_by":[],"changed":{"id":2525,"cve_ids":["CVE-2015-0310"],"payload":{"kind":"advisory","title":"Adobe Flash Player ASLR Bypass Vulnerability","summary":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0310","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0310","aliases":["CVE-2015-0310"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-0310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b83c98f0-6f42-4d57-ade9-c6c0b061ae40","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0310","advisory_id":"b83c98f0-6f42-4d57-ade9-c6c0b061ae40","event_types":["advisory"],"published_at":"2026-10-24T21:20:01.152276+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2525"},"members":[{"id":2525,"cve_ids":["CVE-2015-0310"],"payload":{"kind":"advisory","title":"Adobe Flash Player ASLR Bypass Vulnerability","summary":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2015-0310","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-0310","aliases":["CVE-2015-0310"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-0310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","dueDate":"2022-06-15","product":"Flash Player","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-0310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b83c98f0-6f42-4d57-ade9-c6c0b061ae40","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-0310","advisory_id":"b83c98f0-6f42-4d57-ade9-c6c0b061ae40","event_types":["advisory"],"published_at":"2026-10-24T21:20:01.152276+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2525"}]}},{"id":2497,"cve_ids":["CVE-2010-1297"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2010-1297","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-1297","aliases":["CVE-2010-1297"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2010-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6bc66b1d-7b3f-44ef-bd4a-10c35c337327","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297","advisory_id":"6bc66b1d-7b3f-44ef-bd4a-10c35c337327","event_types":["advisory"],"published_at":"2026-10-24T21:19:51.47264+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/advisories/advisory%3A6bc66b1d-7b3f-44ef-bd4a-10c35c337327","group":{"id":"advisory:6bc66b1d-7b3f-44ef-bd4a-10c35c337327","revision":1,"primary_event_id":2509,"change":"published","superseded_by":[],"changed":{"id":2509,"cve_ids":["CVE-2010-1297"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2010-1297","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-1297","aliases":["CVE-2010-1297"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2010-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6bc66b1d-7b3f-44ef-bd4a-10c35c337327","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297","advisory_id":"6bc66b1d-7b3f-44ef-bd4a-10c35c337327","event_types":["advisory"],"published_at":"2026-10-24T21:19:51.47264+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2509"},"members":[{"id":2509,"cve_ids":["CVE-2010-1297"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2010-1297","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-1297","aliases":["CVE-2010-1297"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2010-1297","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-1297","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6bc66b1d-7b3f-44ef-bd4a-10c35c337327","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-1297","advisory_id":"6bc66b1d-7b3f-44ef-bd4a-10c35c337327","event_types":["advisory"],"published_at":"2026-10-24T21:19:51.47264+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2509"}]}},{"id":2495,"cve_ids":["CVE-2011-0609"],"payload":{"kind":"advisory","title":"Adobe Flash Player Unspecified Vulnerability","summary":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0609","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0609","aliases":["CVE-2011-0609"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2011-0609","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0609","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3f2cdfa5-0180-439c-8951-520a2265ca73","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609","advisory_id":"3f2cdfa5-0180-439c-8951-520a2265ca73","event_types":["advisory"],"published_at":"2026-10-24T21:19:50.302296+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/advisories/advisory%3A3f2cdfa5-0180-439c-8951-520a2265ca73","group":{"id":"advisory:3f2cdfa5-0180-439c-8951-520a2265ca73","revision":1,"primary_event_id":2507,"change":"published","superseded_by":[],"changed":{"id":2507,"cve_ids":["CVE-2011-0609"],"payload":{"kind":"advisory","title":"Adobe Flash Player Unspecified Vulnerability","summary":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0609","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0609","aliases":["CVE-2011-0609"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2011-0609","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0609","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3f2cdfa5-0180-439c-8951-520a2265ca73","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609","advisory_id":"3f2cdfa5-0180-439c-8951-520a2265ca73","event_types":["advisory"],"published_at":"2026-10-24T21:19:50.302296+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2507"},"members":[{"id":2507,"cve_ids":["CVE-2011-0609"],"payload":{"kind":"advisory","title":"Adobe Flash Player Unspecified Vulnerability","summary":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2011-0609","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-0609","aliases":["CVE-2011-0609"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2011-0609","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-0609","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3f2cdfa5-0180-439c-8951-520a2265ca73","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-0609","advisory_id":"3f2cdfa5-0180-439c-8951-520a2265ca73","event_types":["advisory"],"published_at":"2026-10-24T21:19:50.302296+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2507"}]}},{"id":2491,"cve_ids":["CVE-2012-0754"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0754","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0754","aliases":["CVE-2012-0754"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2012-0754","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0754","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:844992f2-fc43-47ea-a01f-cf936e5069d1","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","advisory_id":"844992f2-fc43-47ea-a01f-cf936e5069d1","event_types":["advisory"],"published_at":"2026-10-24T21:19:47.711999+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/advisories/advisory%3A844992f2-fc43-47ea-a01f-cf936e5069d1","group":{"id":"advisory:844992f2-fc43-47ea-a01f-cf936e5069d1","revision":1,"primary_event_id":2503,"change":"published","superseded_by":[],"changed":{"id":2503,"cve_ids":["CVE-2012-0754"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0754","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0754","aliases":["CVE-2012-0754"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2012-0754","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0754","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:844992f2-fc43-47ea-a01f-cf936e5069d1","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","advisory_id":"844992f2-fc43-47ea-a01f-cf936e5069d1","event_types":["advisory"],"published_at":"2026-10-24T21:19:47.711999+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2503"},"members":[{"id":2503,"cve_ids":["CVE-2012-0754"],"payload":{"kind":"advisory","title":"Adobe Flash Player Memory Corruption Vulnerability","summary":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0754","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0754","aliases":["CVE-2012-0754"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2012-0754","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0754","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:844992f2-fc43-47ea-a01f-cf936e5069d1","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0754","advisory_id":"844992f2-fc43-47ea-a01f-cf936e5069d1","event_types":["advisory"],"published_at":"2026-10-24T21:19:47.711999+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2503"}]}},{"id":2489,"cve_ids":["CVE-2012-0767"],"payload":{"kind":"advisory","title":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","summary":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0767","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0767","aliases":["CVE-2012-0767"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-79"],"cveID":"CVE-2012-0767","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0767","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d69bcc9-3dc0-4644-a6c8-a0422a851fff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0767","advisory_id":"9d69bcc9-3dc0-4644-a6c8-a0422a851fff","event_types":["advisory"],"published_at":"2026-10-24T21:19:46.553789+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/advisories/advisory%3A9d69bcc9-3dc0-4644-a6c8-a0422a851fff","group":{"id":"advisory:9d69bcc9-3dc0-4644-a6c8-a0422a851fff","revision":1,"primary_event_id":2501,"change":"published","superseded_by":[],"changed":{"id":2501,"cve_ids":["CVE-2012-0767"],"payload":{"kind":"advisory","title":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","summary":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0767","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0767","aliases":["CVE-2012-0767"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-79"],"cveID":"CVE-2012-0767","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0767","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d69bcc9-3dc0-4644-a6c8-a0422a851fff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0767","advisory_id":"9d69bcc9-3dc0-4644-a6c8-a0422a851fff","event_types":["advisory"],"published_at":"2026-10-24T21:19:46.553789+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2501"},"members":[{"id":2501,"cve_ids":["CVE-2012-0767"],"payload":{"kind":"advisory","title":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","summary":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-0767","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0767","aliases":["CVE-2012-0767"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-79"],"cveID":"CVE-2012-0767","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-0767","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9d69bcc9-3dc0-4644-a6c8-a0422a851fff","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0767","advisory_id":"9d69bcc9-3dc0-4644-a6c8-a0422a851fff","event_types":["advisory"],"published_at":"2026-10-24T21:19:46.553789+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/2501"}]}},{"id":1512,"cve_ids":["CVE-2012-5054"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-5054","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-5054","aliases":["CVE-2012-5054"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2012-5054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-5054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a9845c8-e73a-474d-b84f-3063cde1c613","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5054","advisory_id":"4a9845c8-e73a-474d-b84f-3063cde1c613","event_types":["advisory"],"published_at":"2026-10-24T21:03:13.20015+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/advisories/advisory%3A4a9845c8-e73a-474d-b84f-3063cde1c613","group":{"id":"advisory:4a9845c8-e73a-474d-b84f-3063cde1c613","revision":1,"primary_event_id":1499,"change":"published","superseded_by":[],"changed":{"id":1499,"cve_ids":["CVE-2012-5054"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-5054","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-5054","aliases":["CVE-2012-5054"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2012-5054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-5054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a9845c8-e73a-474d-b84f-3063cde1c613","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5054","advisory_id":"4a9845c8-e73a-474d-b84f-3063cde1c613","event_types":["advisory"],"published_at":"2026-10-24T21:03:13.20015+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/1499"},"members":[{"id":1499,"cve_ids":["CVE-2012-5054"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Overflow Vulnerability","summary":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.","evidence":"kev:CVE-2012-5054","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-5054","aliases":["CVE-2012-5054"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2012-5054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054","dueDate":"2022-06-22","product":"Flash Player","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-5054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a9845c8-e73a-474d-b84f-3063cde1c613","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5054","advisory_id":"4a9845c8-e73a-474d-b84f-3063cde1c613","event_types":["advisory"],"published_at":"2026-10-24T21:03:13.20015+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-06-08T00:00:00+00:00","detail_url":"/events/1499"}]}},{"id":1094,"cve_ids":["CVE-2014-0497"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Underflow Vulnerablity","summary":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","evidence":"kev:CVE-2014-0497","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0497","aliases":["CVE-2014-0497"],"affected":[],"modified":"2024-09-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-191"],"cveID":"CVE-2014-0497","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","dueDate":"2024-10-08","product":"Flash Player","dateAdded":"2024-09-17","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0497","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:651356bd-617a-48a6-acb1-5e85e6bf7a86","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0497","advisory_id":"651356bd-617a-48a6-acb1-5e85e6bf7a86","event_types":["advisory"],"published_at":"2026-10-24T20:56:23.039586+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-09-17T00:00:00+00:00","detail_url":"/advisories/advisory%3A651356bd-617a-48a6-acb1-5e85e6bf7a86","group":{"id":"advisory:651356bd-617a-48a6-acb1-5e85e6bf7a86","revision":1,"primary_event_id":1086,"change":"published","superseded_by":[],"changed":{"id":1086,"cve_ids":["CVE-2014-0497"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Underflow Vulnerablity","summary":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","evidence":"kev:CVE-2014-0497","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0497","aliases":["CVE-2014-0497"],"affected":[],"modified":"2024-09-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-191"],"cveID":"CVE-2014-0497","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","dueDate":"2024-10-08","product":"Flash Player","dateAdded":"2024-09-17","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0497","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:651356bd-617a-48a6-acb1-5e85e6bf7a86","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0497","advisory_id":"651356bd-617a-48a6-acb1-5e85e6bf7a86","event_types":["advisory"],"published_at":"2026-10-24T20:56:23.039586+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-09-17T00:00:00+00:00","detail_url":"/events/1086"},"members":[{"id":1086,"cve_ids":["CVE-2014-0497"],"payload":{"kind":"advisory","title":"Adobe Flash Player Integer Underflow Vulnerablity","summary":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","evidence":"kev:CVE-2014-0497","products":[{"name":{"value":"Flash Player","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0497","aliases":["CVE-2014-0497"],"affected":[],"modified":"2024-09-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-191"],"cveID":"CVE-2014-0497","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","dueDate":"2024-10-08","product":"Flash Player","dateAdded":"2024-09-17","vendorProject":"Adobe","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","known_exploited":true,"shortDescription":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0497","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:651356bd-617a-48a6-acb1-5e85e6bf7a86","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0497","advisory_id":"651356bd-617a-48a6-acb1-5e85e6bf7a86","event_types":["advisory"],"published_at":"2026-10-24T20:56:23.039586+00:00","technologies":["core-kev","flash-player"],"context_update":false,"extraction_method":"structured","source_published_at":"2024-09-17T00:00:00+00:00","detail_url":"/events/1086"}]}}],"next_after":2973,"next_before":1094}