CVE-2012-1535

Adobe Flash Player's unpatched arbitrary code execution vulnerability remains a perpetual liability after its December 2020 end-of-life.

Adobe Flash Player reached end-of-life in December 2020 without further security patches, leaving any remaining installations perpetually vulnerable to unpatched exploits. DIB organizations must ensure Flash is completely removed from all systems to avoid exposure to actively exploited vulnerabilities that could lead to remote code execution and data compromise.

Shame score — Adobe failed to patch a critical vulnerability in a product it discontinued, leaving organizations with a perpetual security liability that attackers actively exploit.