CVE-2014-0556

CVE-2014-0556 is a critical heap-based buffer overflow vulnerability in Adobe Flash Player, AIR, and their SDKs across Windows, OS X, and Linux platforms. With a CVSS score of 10.0, it allows unauthenticated attackers to execute arbitrary code remotely with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. This vulnerability has known Metasploit exploit modules and was actively exploited in the wild shortly after its patch, as evidenced by significant media coverage and community discussion. Although not on the CISA KEV catalog, its high EPSS score and FAUCET Risk Score indicate a severe and exploitable threat.