CVE-2013-0643

Adobe Flash Player Incorrect Default Permissions Vulnerability

Non évaluée Exploitée activement (CISA KEV)

Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 17/09/2024, correctif exigé avant le 08/10/2024 pour les agences fédérales américaines.

Action requise : The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Description officielle (NVD)

Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.

En bref

ÉditeurAdobe
ProduitFlash Player
Publiée le17/09/2024
EPSS10,53 % (centile 96)
CWECWE-264

EPSS : probabilité estimée d'exploitation dans les 30 prochains jours.

Sources officielles

NVD (NIST) CVE.org CISA KEV

Besoin d'aide ?

Nos experts évaluent votre exposition et vous accompagnent dans la correction.

Nous contacter

Autres vulnérabilités Adobe

CVE-2026-83964 Élevée
Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of...
CVE-2026-89276 Critique
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulne...
CVE-2026-83660 Critique
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...
CVE-2026-82443 Critique
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...
CVE-2026-82009 Critique
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm...
CVE-2026-75650 Non évaluée KEV
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability