Technical Severity
HIGH
CVSS v3.1 Metrics
8.8
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitation Likelihood
EPSS Prediction
57.88
%
Predictive Probability
Percentile Rank
98.1
th
Documented as more likely to be exploited than 98.1% of known CVEs.
Detection Date
Sep 17, 2024
Remediation Due
Oct 08, 2024
CISA Catalog Active
Threat Analysis
Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content.
Remediation Directive
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.