Every CVE Search/ Get API key

CVE-2014-0538

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176...

10.0 HighFix available

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Exploit likelihood

7.55%Up 3.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Record
CVE-2014-0538
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Record
CVE-2014-0538
Updated
2026-11-02
EUVDEUVD-2014-0569 No score

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Record
EUVD-2014-0569
Updated
2026-11-03
GitHub AdvisoriesGHSA-wvpx-3jvr-hpw3 No score

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176...

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allows attackers to execute arbitrary code via unspecified vectors.

Record
GHSA-wvpx-3jvr-hpw3
Updated
2026-11-02
OSVMGASA-2014-0335 No score

Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 11.2.202.400 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.

This update resolves memory leakage vulnerabilities that could be used to bypass memory address randomization (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545).

This update resolves a security bypass vulnerability (CVE-2014-0541).

This update resolves a use-after-free vulnerability that could lead to code execution (CVE-2014-0538).

Record
MGASA-2014-0335
Updated
2026-11-02
OSVSUSE-SU-2015:0239-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0239-1
Updated
2026-11-02
Show 5 moreShow less
OSVSUSE-SU-2015:0493-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0493-1
Updated
2026-11-02
OSVSUSE-SU-2015:0723-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0723-1
Updated
2026-11-02
OSVSUSE-SU-2015:0880-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:0880-1
Updated
2026-11-02
OSVSUSE-SU-2015:1064-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:1064-1
Updated
2026-11-02
OSVSUSE-SU-2015:1137-1 No score

Security update for flash-player

flash-player was updated to version 11.2.202.418 to fix 18 security issues:

* Memory corruption vulnerabilities that could lead to code execution
  (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
  (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
  (CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
  (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
  CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
  execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
  disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
  perform privilege escalation from low to medium integrity level
  (CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
  escalation from low to medium integrity level (CVE-2014-8442).

Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .

Security Issues:

* CVE-2014-0576
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
Record
SUSE-SU-2015:1137-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-player-plugin
Mageia:3
 before 11.2.202.400-1.mga3.nonfree
11.2.202.400-1.mga3.nonfree
flash-player-plugin
Mageia:4
 before 11.2.202.400-1.mga4.nonfree
11.2.202.400-1.mga4.nonfree
flash-plugin
Red Hat:rhel_extras:5::client
 before 0:11.2.202.400-1.el5
0:11.2.202.400-1.el5
flash-plugin
Red Hat:rhel_extras:5::server
 before 0:11.2.202.400-1.el5
0:11.2.202.400-1.el5
flash-plugin
Red Hat:rhel_extras:6
 before 0:11.2.202.400-1.el6
0:11.2.202.400-1.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0538 is a high vulnerability (CVSS 10.0) in Adobe Air, published August 12, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.55%, the 94th percentile. Fixed in flash-player-plugin 11.2.202.400-1.mga3.nonfree.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 51 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open