CVE-2014-0497

Adobe Flash Player's integer underflow vulnerability enabled remote code execution and is actively exploited, posing a critical risk to legacy systems still in use.

Adobe Flash Player contained an integer underflow vulnerability allowing remote attackers to execute arbitrary code, and the product reached end-of-life in December 2020 with no further security patches. DIB organizations must immediately audit and remove any remaining Flash Player installations to avoid exploitation by active threat actors.

Shame score — The vendor shipped a discontinued product with a known, actively exploited RCE vulnerability that remains unpatched due to end-of-life status.