CVE-2011-0609

Adobe Flash Player, now end-of-life, contained an unspecified vulnerability allowing remote code execution and denial-of-service attacks, and is actively exploited in the wild.

An unspecified vulnerability in Adobe Flash Player allowed for remote code execution and denial-of-service, and remains unpatched due to the product's end-of-life status. DIB organizations using Flash Player face significant compliance risks under CMMC and NIST 800-171, and must immediately remove all instances. Failure to do so exposes systems to active exploitation and potential data compromise.

Shame score — The continued exploitation of a known vulnerability in a discontinued product demonstrates a failure to maintain a minimum level of security hygiene and poses a significant risk to DIB organizations.