Back to CVE Browser

CVE-2014-8439

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score91.4390%

EPSS Percentile88.39th

PublishedNov 25, 2014

Last ModifiedApr 21, 2026

Vulnerability Description

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Affected Platforms (CPE)

📦

Adobe

Flash Player

<= 11.2.202.418

📦

Adobe

Air

<= 15.0.0.292

📦

Adobe

Air Sdk

<= 15.0.0.301

📦

Adobe

Air Sdk \& Compiler

< 15.0.0.302

📦

Adobe

Flash Player

<= 15.0.0.223

📦

Adobe

Flash Player

<= 13.0.0.252

References & Advisories

🔗 http://helpx.adobe.com/security/products/flash-player/apsb14-22.html

🔗 http://helpx.adobe.com/security/products/flash-player/apsb14-26.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html

🔗 http://rhn.redhat.com/errata/RHSA-2014-1915.html

🔗 http://secunia.com/advisories/60217

🔗 http://www.securityfocus.com/bid/71289

Related Vulnerabilities

CVE-2012-525510.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525610.0

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11....

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525710.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...