Product of Adobe
Flash Player
As of , 33 Adobe Flash Player vulnerabilities are on CISA's list of exploited vulnerabilities, 5 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2014-0497.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2014-0497Integer Underflow Vulnerablity | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 2 | CVE-2010-1297Memory Corruption | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.83; verified Exploit-DB entry | 0.83 | ||
| 3 | CVE-2011-0609Unspecified | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.64; verified Exploit-DB entry | 0.64 | ||
| 4 | CVE-2012-0754Memory Corruption | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.91; verified Exploit-DB entry | 0.91 | ||
| 5 | CVE-2015-0311Remote Code Execution | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.86; verified Exploit-DB entry | 0.86 | ||
| 6 | CVE-2015-0313Use-After-Free | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.95; verified Exploit-DB entry | 0.95 | ||
| 7 | CVE-2015-3113Heap-Based Buffer Overflow | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 8 | CVE-2015-5122Use-After-Free | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.94; verified Exploit-DB entry | 0.94 | ||
| 9 | CVE-2011-0611Remote Code Execution | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 10 | CVE-2012-1535Arbitrary Code Execution | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.70; verified Exploit-DB entry | 0.70 | ||
| 11 | CVE-2015-3043Memory Corruption | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.74; verified Exploit-DB entry | 0.74 | ||
| 12 | CVE-2015-5119Use-After-Free | Adobe Flash Player | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 13 | CVE-2016-4117Arbitrary Code Execution | Adobe Flash Player | Patch this weekRansomware use; Metasploit module; EPSS 0.94; verified Exploit-DB entry | 0.94 | ||
| 14 | CVE-2015-7645Arbitrary Code Execution | Adobe Flash Player | Patch this weekRansomware use; EPSS 0.65; verified Exploit-DB entry | 0.65 | ||
| 15 | CVE-2015-8651Integer Overflow | Adobe Flash Player | Patch this weekEPSS 0.68 | 0.68 | ||
| 16 | CVE-2018-15982Use-After-Free | Adobe Flash Player | Patch this weekRansomware use; EPSS 0.90 | 0.90 | ||
| 17 | CVE-2018-4878Use-After-Free | Adobe Flash Player | Patch this weekRansomware use; EPSS 0.90 | 0.90 | ||
| 18 | CVE-2016-1019Arbitrary Code Execution | Adobe Flash Player | Patch this weekRansomware use | 0.22 | ||
| 19 | CVE-2014-0502Double Free Vulnerablity | Adobe Flash Player | Patch soon | 0.25 | ||
| 20 | CVE-2012-5054Integer Overflow | Adobe Flash Player | Patch soon | 0.21 | ||
| 21 | CVE-2014-8439Dereferenced Pointer | Adobe Flash Player | Patch soon | 0.20 | ||
| 22 | CVE-2018-5002Stack-based Buffer Overflow | Adobe Flash Player | Patch soon | 0.25 | ||
| 23 | CVE-2014-9163Stack-Based Buffer Overflow | Adobe Flash Player | Patch soon | 0.21 | ||
| 24 | CVE-2015-5123Use-After-Free | Adobe Flash Player | Patch soon | 0.19 | ||
| 25 | CVE-2016-4171Remote Code Execution | Adobe Flash Player | Patch soon | 0.20 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 28 |
| 2023 | none |
| 2024 | 4 |
| 2025 | none |
| 2026 | none |