Every CVE Search/ Get API key

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass...

7.5 HighFix available

CVE-2019-8075 is a high vulnerability (CVSS 7.5) in Adobe Flash Player, published September 27, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. Fixed in flash-plugin 0:32.0.0.207-1.el6_10.

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

2.62%Down 3.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Record
CVE-2019-8075
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Record
CVE-2019-8075
Updated
2026-11-02
EUVDEUVD-2019-17533 No score

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Record
EUVD-2019-17533
Updated
2026-11-03
GitHub AdvisoriesGHSA-hr3r-4r34-3hm6 7.5

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass...

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Record
GHSA-hr3r-4r34-3hm6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-346
Updated
2026-11-02
OSVRHSA-2019:1476 8.8

Red Hat Security Advisory: flash-plugin security update

Record
RHSA-2019:1476
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2020:2010-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.
Record
openSUSE-SU-2020:2010-1
Updated
2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2020:2012-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.
Record
openSUSE-SU-2020:2012-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2021-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.
Record
openSUSE-SU-2020:2021-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2026-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2020:2026-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2032-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.
Record
openSUSE-SU-2020:2032-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2055-1 No score

Security update for chromium

This update for chromium fixes the following issues:

  • Update to 87.0.4280.66 (boo#1178923)
    • Wayland support by default
    • CVE-2020-16018: Use after free in payments.
    • CVE-2020-16019: Inappropriate implementation in filesystem.
    • CVE-2020-16020: Inappropriate implementation in cryptohome.
    • CVE-2020-16021: Race in ImageBurner.
    • CVE-2020-16022: Insufficient policy enforcement in networking.
    • CVE-2020-16015: Insufficient data validation in WASM. R
    • CVE-2020-16014: Use after free in PPAPI.
    • CVE-2020-16023: Use after free in WebCodecs.
    • CVE-2020-16024: Heap buffer overflow in UI.
    • CVE-2020-16025: Heap buffer overflow in clipboard.
    • CVE-2020-16026: Use after free in WebRTC.
    • CVE-2020-16027: Insufficient policy enforcement in developer tools. R
    • CVE-2020-16028: Heap buffer overflow in WebRTC.
    • CVE-2020-16029: Inappropriate implementation in PDFium.
    • CVE-2020-16030: Insufficient data validation in Blink.
    • CVE-2019-8075: Insufficient data validation in Flash.
    • CVE-2020-16031: Incorrect security UI in tab preview.
    • CVE-2020-16032: Incorrect security UI in sharing.
    • CVE-2020-16033: Incorrect security UI in WebUSB.
    • CVE-2020-16034: Inappropriate implementation in WebRTC.
    • CVE-2020-16035: Insufficient data validation in cros-disks.
    • CVE-2020-16012: Side-channel information leakage in graphics.
    • CVE-2020-16036: Inappropriate implementation in cookies.

This update was imported from the openSUSE:Leap:15.1:Update update project.

Record
openSUSE-SU-2020:2055-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-plugin
Red Hat:rhel_extras:6
 before 0:32.0.0.207-1.el6_10
0:32.0.0.207-1.el6_10
chromium
SUSE:Package Hub 15 SP1
 before 87.0.4280.66-bp151.3.131.1
87.0.4280.66-bp151.3.131.1
chromium
SUSE:Package Hub 15 SP2
 before 87.0.4280.66-bp152.2.32.1
87.0.4280.66-bp152.2.32.1
chromium
openSUSE:Leap 15.2
 before 87.0.4280.66-lp152.2.51.1
87.0.4280.66-lp152.2.51.1
chromium
SUSE:Package Hub 15 SP2
 before 87.0.4280.66-bp152.2.38.1
87.0.4280.66-bp152.2.38.1
chromium
openSUSE:Leap 15.1
 before 87.0.4280.66-lp151.2.156.1
87.0.4280.66-lp151.2.156.1
chromium
SUSE:Package Hub 15 SP1
 before 87.0.4280.66-bp151.3.137.1
87.0.4280.66-bp151.3.137.1
chromium
openSUSE:Tumbleweed
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
chromium
openSUSE:Tumbleweed
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2,137 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open