CVE-2014-0502

Adobe Flash Player Double Free Vulnerablity

Non évaluée Exploitée activement (CISA KEV)

Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 17/09/2024, correctif exigé avant le 08/10/2024 pour les agences fédérales américaines.

Action requise : The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Description officielle (NVD)

Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.

En bref

ÉditeurAdobe
ProduitFlash Player
Publiée le17/09/2024
EPSS24,82 % (centile 98)
CWECWE-399

EPSS : probabilité estimée d'exploitation dans les 30 prochains jours.

Sources officielles

NVD (NIST) CVE.org CISA KEV

Besoin d'aide ?

Nos experts évaluent votre exposition et vous accompagnent dans la correction.

Nous contacter

Autres vulnérabilités Adobe

CVE-2026-83964 Élevée
Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of...
CVE-2026-89276 Critique
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulne...
CVE-2026-83660 Critique
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...
CVE-2026-82443 Critique
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could resu...
CVE-2026-82009 Critique
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm...
CVE-2026-75650 Non évaluée KEV
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability