KEV · Actively exploited
CVE-2014-0497
CVE-2014-0497 is actively exploited (CISA KEV catalog) : critical severity (CVSS 9.8), 2 tracked apps concerned, none still exposed on their current version.
- Severity (CVSS)
- 9.8
- Exploitation
- Confirmed
- Tracked apps
- 2
- Still exposed
- 0
NVD scale
CISA KEV · EPSS predicts 99.9 %
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Show raw CVSS vector
CISA Known Exploited Vulnerability
- Added to KEV
- 2024-09-17
- Remediation deadline
- 2024-10-08
- Required action
- The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
- Ransomware
- Unknown (not documented by CISA)
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
NVD references 14 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | <32.0.1700.107 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
|
chrome All platforms (wildcard)
|
All platforms (wildcard) | <32.0.1700.107 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.