SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2014-0535

Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass…

HIGH 7.5EPSS 10.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 10.1%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.

Description

Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0534.

CVSS 2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
10.05% probability · 95th percentile
CISA KEV
Not listed
Weakness
CWE-264
Affected
adobe/adobe air sdk · adobe/adobe air · adobe/flash player
Source
psirt@adobe.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.