Exploitation ongoing with high activity in latest observed window (4 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-10-08. The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
8 versions affected across 14 products
| Date | Total | Labels |
|---|
| 2026-04-30 | 1 | Active Exploitation1 |
| 2026-05-01 | 4 | Active Exploitation3Disclosure1 |
What happened CISA added CVE-2014-0502 (Adobe Flash Player) to the Known Exploited Vulnerabilities (KEV) catalog on 2024-09-17, flagging it as actively exploited and setting a remediation due date of 2024-10-08 CISA KEV catalog. CISA’s required action states the impacted…
Post summary
CISA identified CVE-2014-0502 as actively exploited, added it to the KEV catalog, and set a remediation due date.
The vulnerability is a double free memory error in Adobe Flash Player that enables remote code execution via crafted content NVD: CVE-2014-0502. The MITRE CVE record corroborates the issue and impact scope for CVE-2014-0502 MITRE CVE record.
Post summary
The post discloses that CVE-2014-0502 is a double free memory error in Adobe Flash Player that permits remote code execution through crafted content, but it provides no exploits, patches, or real‑world attack evidence.
CVE-2014-0502: Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. What happened CISA added CVE-2014-0502 (Adobe Flash Player) to the Known Exploited Vulnerabilities (KEV) catalog on 2024-09-17, flagging it as…
Post summary
CVE-2014-0502 is confirmed as actively exploited, with CISA noting it in the KEV catalog, though no PoC, exploit tool, or patch details are provided.
https://research.lyrie.ai/research/active-exploit-cve-2014-0502-flash-player #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet links to a research article that reports an actively exploited CVE‑2014‑0502 in Adobe Flash Player, suggesting the vulnerability is being used in real-world attacks.
🚨 HIGH: CVE-2014-0502 (CVSS 8.8) - Double free vulnerability in Adobe Flash Player allows remote code execution. Exploited in wild Feb 2014. Update to 11[.]7[.]700[.]269+ (Win/Mac) or 11[.]2[.]202[.]341+ (Linux) immediately. #CVE #PatchNow #ThreatIntel https://t.co/atQ2bS1yt9
Post summary
The tweet reports that CVE-2014-0502 was exploited in the wild and urges users to apply the Adobe Flash Player patch immediately.
19 of 19 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | adobe_air | - | - | - |
| App | adobe | adobe_air_sdk | - | - | - |
| App | adobe | flash_player | - | - | - |
| OS | apple | mac_os_x | - | - | - |
| OS | android | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |
| OS | opensuse | opensuse | 11.4 | - | - |
| OS | opensuse | opensuse | 12.3 | - | - |
| OS | opensuse | opensuse | 13.1 | - | - |
| OS | redhat | enterprise_linux_desktop | 5.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 6.0 | - | - |
| OS | redhat | enterprise_linux_eus | 6.5 | - | - |
| OS | redhat | enterprise_linux_server | 5.0 | - | - |
| OS | redhat | enterprise_linux_server | 6.0 | - | - |
| OS | redhat | enterprise_linux_server_aus | 6.5 | - | - |
| OS | redhat | enterprise_linux_workstation | 5.0 | - | - |
| OS | redhat | enterprise_linux_workstation | 6.0 | - | - |
| OS | suse | linux_enterprise_desktop | 11 | - | - |