CVE-2015-0311

Adobe Flash Player's unpatched RCE vulnerability remains a perpetual liability after its December 2020 end-of-life.

Adobe Flash Player reached end-of-life in December 2020 without further security patches, leaving any remaining installations perpetually vulnerable to unpatched exploits. DIB organizations must ensure Flash is completely removed from all systems to avoid exposure to actively exploited RCE vulnerabilities that could compromise network integrity and violate compliance requirements.

Shame score — Adobe's failure to patch known vulnerabilities before discontinuing Flash Player, combined with the product's continued presence in some environments, represents a negligent, avoidable security failure that perpetually exposes organizations to actively exploited RCE attacks.