CVE Watch—

CVE-2013-0648

Adobe Flash Player Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

11.1%

p96

KEV

YES

Sep 17, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

11.1%EPSS · 30 days11.1%

2026-09-172026-10-15

KEV catalog record

Product

Adobe / Flash Player

Vulnerability

Adobe Flash Player Code Execution Vulnerability

Added to KEV

Sep 17, 2024

Remediate by

Oct 8, 2024

Known ransomware use

Summary description

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

Required action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Notes

https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0648

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-159827.8 HIG

99.8%

KEV—80Adobe Flash Player Use-After-Free Vulnerability15d CVE-2016-41179.8 CRI

99.9%

KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability36d CVE-2016-10199.8 CRI

97.7%

KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability15d CVE-2014-0497—

100.0%

KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-3113—

100.0%

KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—

99.9%

KEV—80Adobe Flash Player Remote Code Execution Vulnerability—