Every CVE Search/ Get API key

CVE-2014-0502

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...

8.8 HighIn KEV

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

24.8%Up 16.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Record
CVE-2014-0502
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-415
Updated
2026-11-02
CVE List 8.8

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Record
CVE-2014-0502
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-415
Updated
2026-11-02
EUVDEUVD-2014-0533 8.8

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Record
EUVD-2014-0533
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-955p-xvq6-xggj 8.8

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Record
GHSA-955p-xvq6-xggj
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-415
Updated
2026-11-02
CISA KEV No score

Adobe Flash Player Double Free Vulnerablity

Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.

Record
CVE-2014-0502
Weakness
CWE-399
Updated
2026-11-02
OSVMGASA-2014-0091 No score

Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.341 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system.

This update resolves a stack overflow vulnerability that could result in arbitrary code execution (CVE-2014-0498).

This update resolves a memory leak vulnerability that could be used to defeat memory address layout randomization (CVE-2014-0499).

This update resolves a double free vulnerability that could result in arbitrary code execution (CVE-2014-0502).

Adobe is aware of reports that CVE-2014-0502 is being exploited in the wild.

Record
MGASA-2014-0091
Updated
2026-11-02
Show 6 moreShow less
OSVSUSE-SU-2015:0239-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0239-1
Updated
2026-11-02
OSVSUSE-SU-2015:0493-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0493-1
Updated
2026-11-02
OSVSUSE-SU-2015:0723-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0723-1
Updated
2026-11-02
OSVSUSE-SU-2015:0880-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0880-1
Updated
2026-11-02
OSVSUSE-SU-2015:1064-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:1064-1
Updated
2026-11-02
OSVSUSE-SU-2015:1137-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:1137-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-player-plugin
Mageia:3
From an advisory covering 3 CVEs
 before 11.2.202.341-1.mga3.nonfree
11.2.202.341-1.mga3.nonfree
flash-player-plugin
Mageia:4
From an advisory covering 3 CVEs
 before 11.2.202.341-1.mga4.nonfree
11.2.202.341-1.mga4.nonfree
flash-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 3 CVEs
 before 0:11.2.202.341-1.el5
0:11.2.202.341-1.el5
flash-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 3 CVEs
 before 0:11.2.202.341-1.el5
0:11.2.202.341-1.el5
flash-plugin
Red Hat:rhel_extras:6
From an advisory covering 3 CVEs
 before 0:11.2.202.341-1.el6
0:11.2.202.341-1.el6

History

History
RecordedChangedSources
affected, facts
exploitation
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0502 is a high vulnerability (CVSS 8.8) in Adobe Air, published February 21, 2014. CISA lists it as known to be exploited, since September 17, 2024. EUVD reports exploitation since September 17, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 24.8%, the 97th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 38 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open