CVE-2013-0643: Adobe Flash Player
EPSS10.5%No. 1272 of 1739 in KEV
CVE year2013~11 yrs before listing
Same vendor in KEV82
Same product33
| Field | Value |
|---|---|
| Vendor | Adobe |
| Product | Flash Player |
| Name | Adobe Flash Player Incorrect Default Permissions Vulnerability |
| Added to KEV | 2024-09-17 |
| US federal due date | 2024-10-08 |
| Ransomware use | Unknown |
| CWE | CWE-264 |
CISA description
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 24.8% | Unknown |
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 99.8% | Unknown |
| CVE-2013-0648 | Adobe Flash Player | 2024-09-17 | 11.0% | Unknown |
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.1% | Unknown |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 91.0% | Unknown |
| CVE-2011-0609 | Adobe Flash Player | 2022-06-08 | 63.5% | Unknown |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.5% | Unknown |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.6% | Unknown |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.0% | Unknown |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.3% | Unknown |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 25.0% | Unknown |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | Unknown |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 93.9% | Unknown |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Adobe Flash Player vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-09-17.