Exploitation ongoing with high activity in latest observed window (6 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-10-08. The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Priority
CRITICAL
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 14 products
00:14 UTC: Thread live on @lyrie_ai. What happened CISA added CVE-2014-0497 to the Known Exploited Vulnerabilities catalog on 2024-09-17, signaling confirmed in-the-wild exploitation CISA KEV.
Post summary
CISA confirmed CVE-2014-0497 is actively exploited in the wild, as indicated by its inclusion in the Known Exploited Vulnerabilities catalog.
03:00 UTC: First exploit attempt in the wild. What happened CISA added CVE-2014-0497 to the Known Exploited Vulnerabilities catalog on 2024-09-17, signaling confirmed in-the-wild exploitation CISA KEV.
Post summary
CISA confirmed that CVE-2014-0497 is being exploited in the wild, marking the first reported attack attempts against it.
00:03 UTC: Lyrie Sentinel flagged it. What happened CISA added CVE-2014-0497 to the Known Exploited Vulnerabilities catalog on 2024-09-17, signaling confirmed in-the-wild exploitation CISA KEV.
Post summary
CISA confirmed that CVE-2014-0497 is being exploited in the wild, adding it to the Known Exploited Vulnerabilities catalog.
00:11 UTC: GPT-5 enrichment complete. 651 words. 3 citations. What happened CISA added CVE-2014-0497 to the Known Exploited Vulnerabilities catalog on 2024-09-17, signaling confirmed in-the-wild exploitation CISA KEV.
Post summary
CISA has added CVE-2014-0497 to its Known Exploited Vulnerabilities catalog, confirming it is being exploited in the wild.
00:00 UTC: CVE-2014-0497 disclosed. CISA: CVE-2014-0497 added to Known Exploited Vulnerabilities — Adobe Flash Player What happened CISA added CVE-2014-0497 to the Known Exploited Vulnerabilities catalog on 2024-09-17, signaling confirmed in-the-wild exploitation CISA KEV.
Post summary
CISA has listed CVE-2014-0497 in its Known Exploited Vulnerabilities catalog, confirming that Adobe Flash Player has been actively exploited in the wild.
https://research.lyrie.ai/research/active-exploit-cve-2014-0497-flash-player #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The article highlights that CVE‑2014‑0497 in Flash Player is being actively exploited, providing a PoC/exploit, but does not discuss patches or detailed technical aspects.
21 of 21 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | flash_player | - | - | - |
| OS | apple | mac_os_x | - | - | - |
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - | |
| OS | chrome_os | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |
| OS | opensuse | opensuse | 11.4 | - | - |
| OS | opensuse | opensuse | 12.3 | - | - |
| OS | opensuse | opensuse | 13.1 | - | - |
| OS | redhat | enterprise_linux_desktop | 5.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 6.0 | - | - |
| OS | redhat | enterprise_linux_eus | 6.5 | - | - |
| OS | redhat | enterprise_linux_server | 5.0 | - | - |
| OS | redhat | enterprise_linux_server | 6.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.5 | - | - |
| OS | redhat | enterprise_linux_workstation | 5.0 | - | - |
| OS | redhat | enterprise_linux_workstation | 6.0 | - | - |
| OS | suse | linux_enterprise_desktop | 11 | - | - |
| OS | suse | linux_enterprise_desktop | 11 | - | - |