CVE-2014-0573
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15...
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
Exploit likelihood
What each source reports
NVD Score used
10.0
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
- Record
CVE-2014-0573- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
- Record
CVE-2014-0573- Updated
- 2026-11-02
EUVDEUVD-2014-0604 No score
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
- Record
EUVD-2014-0604- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g5jh-8j54-9638 No score
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15...
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
- Record
GHSA-g5jh-8j54-9638- Updated
- 2026-11-02
OSVMGASA-2014-0448 No score
Updated flash-player-plugin packages fix multiple security vulnerabilities
Adobe Flash Player 11.2.202.418 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.
This update resolves memory corruption vulnerabilities that could lead to code execution (CVE-2014-0558, CVE-2014-0564, CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2014-0569).
This update resolves use-after-free vulnerabilities that could lead to code execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
This update resolves a double free vulnerability that could lead to code execution (CVE-2014-0574).
This update resolves type confusion vulnerabilities that could lead to code execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590).
This update resolves heap buffer overflow vulnerabilities that could lead to code execution (CVE-2014-0582, CVE-2014-0589).
This update resolves an information disclosure vulnerability that could be exploited to disclose session tokens (CVE-2014-8437).
This update resolves a heap buffer overflow vulnerability that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-0583).
This update resolves a permission issue that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-8442).
- Record
MGASA-2014-0448- Updated
- 2026-11-02
OSVSUSE-SU-2015:0239-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0239-1- Updated
- 2026-11-02
Show 6 moreShow less
OSVSUSE-SU-2015:0493-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0493-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0723-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0723-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0880-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0880-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1064-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:1064-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1137-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:1137-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-0573 No score
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.
- Record
UBUNTU-CVE-2014-0573- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:3 From an advisory covering 21 CVEs |
before 11.2.202.418-1.mga3.nonfree | 11.2.202.418-1.mga3.nonfree |
flash-player-pluginMageia:4 From an advisory covering 21 CVEs |
before 11.2.202.418-1.mga4.nonfree | 11.2.202.418-1.mga4.nonfree |
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 0:11.2.202.418-1.el5 | 0:11.2.202.418-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 0:11.2.202.418-1.el5 | 0:11.2.202.418-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 16 CVEs |
before 0:11.2.202.418-1.el6 | 0:11.2.202.418-1.el6 |
flashplugin-nonfreeUbuntu:14.04:LTS |
before 11.2.202.418ubuntu0.14.04.1, plus listed versions 11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1 Show 11 moreShow less11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.1 |
11.2.202.418ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0573 is a high vulnerability (CVSS 10.0) in Adobe Air, published November 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.58%, the 91st percentile. Fixed in flashplugin-nonfree 11.2.202.418ubuntu0.14.04.1.
References
helpx.adobe.com/security/products/flash-player/apsb14-24.html
lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
nvd.nist.gov/vuln/detail/CVE-2014-0573
github.com/advisories/GHSA-g5jh-8j54-9638
advisories.mageia.org/MGASA-2014-0448.html
bugs.mageia.org/show_bug.cgi?id=14506
Show 194 moreShow less
helpx.adobe.com/security/products/flash-player/apsb14-22.html
access.redhat.com/errata/RHSA-2014:1852
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1162911
bugzilla.redhat.com/show_bug.cgi?id=1162912
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1852.json
access.redhat.com/security/cve/CVE-2014-0573
cve.org/CVERecord?id=CVE-2014-0573
access.redhat.com/security/cve/CVE-2014-0574
cve.org/CVERecord?id=CVE-2014-0574
nvd.nist.gov/vuln/detail/CVE-2014-0574
access.redhat.com/security/cve/CVE-2014-0576
cve.org/CVERecord?id=CVE-2014-0576
nvd.nist.gov/vuln/detail/CVE-2014-0576
access.redhat.com/security/cve/CVE-2014-0577
cve.org/CVERecord?id=CVE-2014-0577
nvd.nist.gov/vuln/detail/CVE-2014-0577
access.redhat.com/security/cve/CVE-2014-0581
cve.org/CVERecord?id=CVE-2014-0581
nvd.nist.gov/vuln/detail/CVE-2014-0581
access.redhat.com/security/cve/CVE-2014-0582
cve.org/CVERecord?id=CVE-2014-0582
nvd.nist.gov/vuln/detail/CVE-2014-0582
access.redhat.com/security/cve/CVE-2014-0584
cve.org/CVERecord?id=CVE-2014-0584
nvd.nist.gov/vuln/detail/CVE-2014-0584
access.redhat.com/security/cve/CVE-2014-0585
cve.org/CVERecord?id=CVE-2014-0585
nvd.nist.gov/vuln/detail/CVE-2014-0585
access.redhat.com/security/cve/CVE-2014-0586
cve.org/CVERecord?id=CVE-2014-0586
nvd.nist.gov/vuln/detail/CVE-2014-0586
access.redhat.com/security/cve/CVE-2014-0588
cve.org/CVERecord?id=CVE-2014-0588
nvd.nist.gov/vuln/detail/CVE-2014-0588
access.redhat.com/security/cve/CVE-2014-0589
cve.org/CVERecord?id=CVE-2014-0589
nvd.nist.gov/vuln/detail/CVE-2014-0589
access.redhat.com/security/cve/CVE-2014-0590
cve.org/CVERecord?id=CVE-2014-0590
nvd.nist.gov/vuln/detail/CVE-2014-0590
access.redhat.com/security/cve/CVE-2014-8437
cve.org/CVERecord?id=CVE-2014-8437
nvd.nist.gov/vuln/detail/CVE-2014-8437
access.redhat.com/security/cve/CVE-2014-8438
cve.org/CVERecord?id=CVE-2014-8438
nvd.nist.gov/vuln/detail/CVE-2014-8438
access.redhat.com/security/cve/CVE-2014-8440
cve.org/CVERecord?id=CVE-2014-8440
nvd.nist.gov/vuln/detail/CVE-2014-8440
access.redhat.com/security/cve/CVE-2014-8441
cve.org/CVERecord?id=CVE-2014-8441
nvd.nist.gov/vuln/detail/CVE-2014-8441
suse.com/support/update/announcement/2015/suse-su-20150239-1
bugzilla.suse.com/824512
bugzilla.suse.com/828810
bugzilla.suse.com/839897
bugzilla.suse.com/850220
bugzilla.suse.com/854881
bugzilla.suse.com/856386
bugzilla.suse.com/858822
bugzilla.suse.com/862288
bugzilla.suse.com/865021
bugzilla.suse.com/867808
bugzilla.suse.com/872692
bugzilla.suse.com/875577
bugzilla.suse.com/877649
bugzilla.suse.com/882187
bugzilla.suse.com/886472
bugzilla.suse.com/891688
bugzilla.suse.com/895856
bugzilla.suse.com/901334
bugzilla.suse.com/905032
bugzilla.suse.com/907257
bugzilla.suse.com/909219
bugzilla.suse.com/913057
bugzilla.suse.com/914333
bugzilla.suse.com/914463
bugzilla.suse.com/915918
bugzilla.suse.com/922033
bugzilla.suse.com/927089
bugzilla.suse.com/930677
bugzilla.suse.com/934088
bugzilla.suse.com/935701
suse.com/security/cve/CVE-2013-3343
suse.com/security/cve/CVE-2013-3344
suse.com/security/cve/CVE-2013-3345
suse.com/security/cve/CVE-2013-3347
suse.com/security/cve/CVE-2013-3361
suse.com/security/cve/CVE-2013-3362
suse.com/security/cve/CVE-2013-3363
suse.com/security/cve/CVE-2013-5324
suse.com/security/cve/CVE-2013-5329
suse.com/security/cve/CVE-2013-5330
suse.com/security/cve/CVE-2013-5331
suse.com/security/cve/CVE-2013-5332
suse.com/security/cve/CVE-2014-0491
suse.com/security/cve/CVE-2014-0492
suse.com/security/cve/CVE-2014-0497
suse.com/security/cve/CVE-2014-0498
suse.com/security/cve/CVE-2014-0499
suse.com/security/cve/CVE-2014-0502
suse.com/security/cve/CVE-2014-0503
suse.com/security/cve/CVE-2014-0504
suse.com/security/cve/CVE-2014-0506
suse.com/security/cve/CVE-2014-0507
suse.com/security/cve/CVE-2014-0508
suse.com/security/cve/CVE-2014-0509
suse.com/security/cve/CVE-2014-0510
suse.com/security/cve/CVE-2014-0515
suse.com/security/cve/CVE-2014-0516
suse.com/security/cve/CVE-2014-0517
suse.com/security/cve/CVE-2014-0518
suse.com/security/cve/CVE-2014-0519
suse.com/security/cve/CVE-2014-0520
suse.com/security/cve/CVE-2014-0531
suse.com/security/cve/CVE-2014-0532
suse.com/security/cve/CVE-2014-0533
suse.com/security/cve/CVE-2014-0534
suse.com/security/cve/CVE-2014-0535
suse.com/security/cve/CVE-2014-0536
suse.com/security/cve/CVE-2014-0537
suse.com/security/cve/CVE-2014-0538
suse.com/security/cve/CVE-2014-0539
suse.com/security/cve/CVE-2014-0540
suse.com/security/cve/CVE-2014-0541
suse.com/security/cve/CVE-2014-0542
suse.com/security/cve/CVE-2014-0543
suse.com/security/cve/CVE-2014-0544
suse.com/security/cve/CVE-2014-0545
suse.com/security/cve/CVE-2014-0547
suse.com/security/cve/CVE-2014-0548
suse.com/security/cve/CVE-2014-0549
suse.com/security/cve/CVE-2014-0550
suse.com/security/cve/CVE-2014-0551
suse.com/security/cve/CVE-2014-0552
suse.com/security/cve/CVE-2014-0553
suse.com/security/cve/CVE-2014-0554
suse.com/security/cve/CVE-2014-0555
suse.com/security/cve/CVE-2014-0556
suse.com/security/cve/CVE-2014-0557
suse.com/security/cve/CVE-2014-0558
suse.com/security/cve/CVE-2014-0559
suse.com/security/cve/CVE-2014-0564
suse.com/security/cve/CVE-2014-0569
suse.com/security/cve/CVE-2014-0573
suse.com/security/cve/CVE-2014-0574
suse.com/security/cve/CVE-2014-0576
suse.com/security/cve/CVE-2014-0577
suse.com/security/cve/CVE-2014-0580
suse.com/security/cve/CVE-2014-0581
suse.com/security/cve/CVE-2014-0582
suse.com/security/cve/CVE-2014-0583
suse.com/security/cve/CVE-2014-0584
suse.com/security/cve/CVE-2014-0585
suse.com/security/cve/CVE-2014-0586
suse.com/security/cve/CVE-2014-0587
suse.com/security/cve/CVE-2014-0588
suse.com/security/cve/CVE-2014-0589
suse.com/security/cve/CVE-2014-0590
suse.com/security/cve/CVE-2014-4671
suse.com/security/cve/CVE-2014-8437
suse.com/security/cve/CVE-2014-8438
suse.com/security/cve/CVE-2014-8439
suse.com/security/cve/CVE-2014-8440
suse.com/security/cve/CVE-2014-8441
suse.com/security/cve/CVE-2014-8442
suse.com/security/cve/CVE-2014-8443
suse.com/security/cve/CVE-2014-9162
suse.com/security/cve/CVE-2014-9163
suse.com/security/cve/CVE-2014-9164
suse.com/security/cve/CVE-2015-0301
suse.com/security/cve/CVE-2015-0302
suse.com/security/cve/CVE-2015-0303
suse.com/security/cve/CVE-2015-0304
suse.com/security/cve/CVE-2015-0305
suse.com/security/cve/CVE-2015-0306
suse.com/security/cve/CVE-2015-0307
suse.com/security/cve/CVE-2015-0308
suse.com/security/cve/CVE-2015-0309
suse.com/security/cve/CVE-2015-0310
suse.com/security/cve/CVE-2015-0311
suse.com/security/cve/CVE-2015-0313
suse.com/security/cve/CVE-2015-0314
suse.com/security/cve/CVE-2015-0315
suse.com/security/cve/CVE-2015-0316
suse.com/security/cve/CVE-2015-0317
suse.com/security/cve/CVE-2015-0318
suse.com/security/cve/CVE-2015-0319
suse.com/security/cve/CVE-2015-0320
suse.com/security/cve/CVE-2015-0321
suse.com/security/cve/CVE-2015-0322
suse.com/security/cve/CVE-2015-0323
ubuntu.com/security/CVE-2014-0573
Left out here: 72 references. The JSON record has them.