cbcvebase.
CVE-2013-0650
published 2013-03-13

CVE-2013-0650: Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before…

PriorityP347critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
6.53%
93.0th percentile
Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Affected

124 ranges· showing 25
VendorProductVersion rangeFixed in
adobeadobe_air<= 3.6.0.597—
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——

CVSS provenance

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.