Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 17/09/2024, correctif exigé avant le 08/10/2024 pour les agences fédérales américaines.

Action requise : The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Description officielle (NVD)

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

En bref

Éditeur	Adobe
Produit	Flash Player
Publiée le	17/09/2024
EPSS	11,09 % (centile 96)

EPSS : probabilité estimée d'exploitation dans les 30 prochains jours.

Sources officielles

NVD (NIST) CVE.org CISA KEV

Besoin d'aide ?

Nos experts évaluent votre exposition et vous accompagnent dans la correction.

Nous contacter

Autres vulnérabilités Adobe

CVE-2026-83964 Élevée

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of...

CVE-2026-89276 Critique

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulne...

CVE-2026-83660 Critique

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...

CVE-2026-82443 Critique

Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...

CVE-2026-82009 Critique

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm...

CVE-2026-75650 Non évaluée KEV

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CVE-2013-0648