CVE-2013-0648

Adobe Flash Player Code Execution Vulnerability

Adobe — Flash Player

Added to KEV catalog: 17 September 2024
Federal remediation due date: 8 October 2024

CISA Description

Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.

Required action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Notes

https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0648

View on NVD View on MITRE CVE View full CISA catalog

More Adobe Vulnerabilities

CVE-2026-48282

Adobe ColdFusion Path Traversal Vulnerability

CVE-2009-3459

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

CVE-2026-34621

Adobe Acrobat and Reader Prototype Pollution Vulnerability

CVE-2020-9715

Adobe Acrobat Use-After-Free Vulnerability

CVE-2025-54236

Adobe Commerce and Magento Improper Input Validation Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services