CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
CVSS
—
No CVSS
EPSS
99.9%
p100
KEV
YES
Sep 17, 2024
Exploit Today
80
0-100
Published: — · Last modified: —
99.9%EPSS · 30 days99.9%
2026-09-162026-10-14
Product
Adobe / Flash Player
Vulnerability
Adobe Flash Player Integer Underflow Vulnerablity
Added to KEV
Sep 17, 2024
Remediate by
Oct 8, 2024
Known ransomware use
No
Summary description
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
Required action
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Notes
https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2018-159827.8 HIG99.8%
KEV—80Adobe Flash Player Use-After-Free Vulnerability13dCVE-2016-41179.8 CRI99.9%
KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability35dCVE-2016-10199.8 CRI97.7%
KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability13dCVE-2015-3113—100.0%
KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—99.9%
KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2015-5119—99.9%
KEV—80Adobe Flash Player Use-After-Free Vulnerability—