{"id":"CVE-2014-0540","aliases":["EUVD-2014-0571","GHSA-2j7g-j9qp-627h","MGASA-2014-0335","RHSA-2014:1051","SUSE-SU-2015:0239-1","SUSE-SU-2015:0493-1","SUSE-SU-2015:0723-1","SUSE-SU-2015:0880-1","SUSE-SU-2015:1064-1","SUSE-SU-2015:1137-1"],"status":"published","title":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11...","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK \u0026 Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03978,"percentile":0.90557,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2014-08-12T22:00:00Z","modified":"2026-06-29T10:07:13Z","affected":[{"source":"osv","ecosystem":"Mageia:3","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.400-1.mga3.nonfree"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:4","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.400-1.mga4.nonfree"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.400-1.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.400-1.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.400-1.el6"}]}],"bundled":8}],"products":[{"vendor":"adobe","product":"adobe_air"},{"vendor":"adobe","product":"adobe_air_sdk"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"http://secunia.com/advisories/60710","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/60732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"http://www.securitytracker.com/id/1030712","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-201408-05.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0540","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2j7g-j9qp-627h"},{"url":"https://advisories.mageia.org/MGASA-2014-0335.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13907","tags":["report"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb14-18.html","tags":["web","article"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1051","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129417","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1051.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0538","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0538","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0542","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0545","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-5333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5333","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5333","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150239-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/824512","tags":["report"]},{"url":"https://bugzilla.suse.com/828810","tags":["report"]},{"url":"https://bugzilla.suse.com/839897","tags":["report"]},{"url":"https://bugzilla.suse.com/850220","tags":["report"]},{"url":"https://bugzilla.suse.com/854881","tags":["report"]},{"url":"https://bugzilla.suse.com/856386","tags":["report"]},{"url":"https://bugzilla.suse.com/858822","tags":["report"]},{"url":"https://bugzilla.suse.com/862288","tags":["report"]},{"url":"https://bugzilla.suse.com/865021","tags":["report"]},{"url":"https://bugzilla.suse.com/867808","tags":["report"]},{"url":"https://bugzilla.suse.com/872692","tags":["report"]},{"url":"https://bugzilla.suse.com/875577","tags":["report"]},{"url":"https://bugzilla.suse.com/877649","tags":["report"]},{"url":"https://bugzilla.suse.com/882187","tags":["report"]},{"url":"https://bugzilla.suse.com/886472","tags":["report"]},{"url":"https://bugzilla.suse.com/891688","tags":["report"]},{"url":"https://bugzilla.suse.com/895856","tags":["report"]},{"url":"https://bugzilla.suse.com/901334","tags":["report"]},{"url":"https://bugzilla.suse.com/905032","tags":["report"]},{"url":"https://bugzilla.suse.com/907257","tags":["report"]},{"url":"https://bugzilla.suse.com/909219","tags":["report"]},{"url":"https://bugzilla.suse.com/913057","tags":["report"]},{"url":"https://bugzilla.suse.com/914333","tags":["report"]},{"url":"https://bugzilla.suse.com/914463","tags":["report"]},{"url":"https://bugzilla.suse.com/915918","tags":["report"]},{"url":"https://bugzilla.suse.com/922033","tags":["report"]},{"url":"https://bugzilla.suse.com/927089","tags":["report"]},{"url":"https://bugzilla.suse.com/930677","tags":["report"]},{"url":"https://bugzilla.suse.com/934088","tags":["report"]},{"url":"https://bugzilla.suse.com/935701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3113","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150723-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150880-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151064-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-0540","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK \u0026 Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.","status":"published","published":"2014-08-12T22:00:00Z","modified":"2024-08-06T09:20:19.024Z","updated_at":"2026-11-02T14:33:47.330011Z"}],"euvd":[{"id":"EUVD-2014-0571","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK \u0026 Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.","status":"published","published":"2014-08-12T22:00:00Z","modified":"2024-08-06T09:20:19Z","updated_at":"2026-11-03T01:57:20.588168Z"}],"ghsa":[{"id":"GHSA-2j7g-j9qp-627h","title":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11...","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK \u0026 Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.","status":"published","published":"2022-05-17T03:07:04Z","modified":"2023-01-27T05:06:13Z","updated_at":"2026-11-02T14:42:51.492706Z"}],"nvd":[{"id":"CVE-2014-0540","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK \u0026 Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.","status":"published","published":"2014-08-12T22:55:02.42Z","modified":"2026-06-17T00:03:14.373Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:55.19899Z"}],"osv":[{"id":"MGASA-2014-0335","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.400 contains fixes to critical security \nvulnerabilities found in earlier versions that could potentially allow an \nattacker to take control of the affected system.\n\nThis update resolves memory leakage vulnerabilities that could be used\nto bypass memory address randomization (CVE-2014-0540, CVE-2014-0542,\nCVE-2014-0543, CVE-2014-0544, CVE-2014-0545).\n\nThis update resolves a security bypass vulnerability (CVE-2014-0541).\n\nThis update resolves a use-after-free vulnerability that could lead\nto code execution (CVE-2014-0538).\n","status":"published","published":"2014-08-18T09:14:56Z","modified":"2026-04-16T06:23:54.500784987Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1051","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:19:10Z","modified":"2026-06-29T10:07:13Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0239-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2025-05-02T04:03:57.228408Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0493-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:08:38.331818Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0723-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:31:32.604879Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0880-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T02:39:45.191501Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1064-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:39:48.304838Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1137-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:11:51.763015Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}