CVE-2019-7845
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and...
CVE-2019-7845 is a high vulnerability (CVSS 8.8) in Adobe Flash Player, published June 12, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.50%, the 92nd percentile. Fixed in flash-player-plugin 32.0.0.207-1.mga6.nonfree.
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- Record
CVE-2019-7845- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- Record
CVE-2019-7845- Updated
- 2026-11-02
EUVDEUVD-2019-17373 No score
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- Record
EUVD-2019-17373- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-284f-xx97-3544
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and...
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- Record
GHSA-284f-xx97-3544- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVRHSA-2019:1476
Red Hat Security Advisory: flash-plugin security update
- Record
RHSA-2019:1476- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2019-0192 No score
Updated flash-player-plugin packages fix security vulnerability
Updated flash-player-plugin package fixes a security vulnerability:
A use after free that leads to arbitrary code execution. (CVE-2019-7845)
- Record
MGASA-2019-0192- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:6 |
before 32.0.0.207-1.mga6.nonfree | 32.0.0.207-1.mga6.nonfree |
flash-pluginRed Hat:rhel_extras:6 |
before 0:32.0.0.207-1.el6_10 | 0:32.0.0.207-1.el6_10 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
helpx.adobe.com/security/products/flash-player/apsb19-30.html
access.redhat.com/errata/RHSA-2019:1476
security.gentoo.org/glsa/201908-21
nvd.nist.gov/vuln/detail/CVE-2019-7845
github.com/advisories/GHSA-284f-xx97-3544
advisories.mageia.org/MGASA-2019-0192.html
Show 10 moreShow less
bugs.mageia.org/show_bug.cgi?id=24942
bugzilla.redhat.com/show_bug.cgi?id=1719449
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1476.json
cve.org/CVERecord?id=CVE-2019-7845