{"id":"CVE-2014-8439","aliases":["EUVD-2014-8276","GHSA-w62w-9g5v-w3p4","MGASA-2014-0497","RHSA-2014:1915","SUSE-SU-2015:0239-1","SUSE-SU-2015:0493-1","SUSE-SU-2015:0723-1","SUSE-SU-2015:0880-1","SUSE-SU-2015:1064-1","SUSE-SU-2015:1137-1","UBUNTU-CVE-2014-8439"],"status":"published","title":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and...","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.20369,"percentile":0.975,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-416"],"published":"2014-11-14T12:52:02Z","modified":"2026-06-29T10:08:00Z","kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-05-25"},{"source":"kev","since":"2022-05-25"}],"fixes":[{"ecosystem":"Mageia:3","package":"flash-player-plugin","fixed_in":["11.2.202.424-1.mga3.nonfree"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"flash-player-plugin","fixed_in":["11.2.202.424-1.mga4.nonfree"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","fixed_in":["0:11.2.202.424-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","fixed_in":["0:11.2.202.424-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","fixed_in":["0:11.2.202.424-1.el6"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.424ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.424-1.mga3.nonfree"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.424-1.mga4.nonfree"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.424-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.424-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.424-1.el6"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.424ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"air"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash player"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/98932","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.f-secure.com/weblog/archives/00002768.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1031259","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/71289","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/60217","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Permissions Required"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1915.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-22.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-26.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","article","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8439","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w62w-9g5v-w3p4"},{"url":"https://advisories.mageia.org/MGASA-2014-0497.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14660","tags":["report"]},{"url":"http://advisories.mageia.org/MGASA-2014-0448.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1915","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb14-26.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168057","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1915.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8439","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150239-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/824512","tags":["report"]},{"url":"https://bugzilla.suse.com/828810","tags":["report"]},{"url":"https://bugzilla.suse.com/839897","tags":["report"]},{"url":"https://bugzilla.suse.com/850220","tags":["report"]},{"url":"https://bugzilla.suse.com/854881","tags":["report"]},{"url":"https://bugzilla.suse.com/856386","tags":["report"]},{"url":"https://bugzilla.suse.com/858822","tags":["report"]},{"url":"https://bugzilla.suse.com/862288","tags":["report"]},{"url":"https://bugzilla.suse.com/865021","tags":["report"]},{"url":"https://bugzilla.suse.com/867808","tags":["report"]},{"url":"https://bugzilla.suse.com/872692","tags":["report"]},{"url":"https://bugzilla.suse.com/875577","tags":["report"]},{"url":"https://bugzilla.suse.com/877649","tags":["report"]},{"url":"https://bugzilla.suse.com/882187","tags":["report"]},{"url":"https://bugzilla.suse.com/886472","tags":["report"]},{"url":"https://bugzilla.suse.com/891688","tags":["report"]},{"url":"https://bugzilla.suse.com/895856","tags":["report"]},{"url":"https://bugzilla.suse.com/901334","tags":["report"]},{"url":"https://bugzilla.suse.com/905032","tags":["report"]},{"url":"https://bugzilla.suse.com/907257","tags":["report"]},{"url":"https://bugzilla.suse.com/909219","tags":["report"]},{"url":"https://bugzilla.suse.com/913057","tags":["report"]},{"url":"https://bugzilla.suse.com/914333","tags":["report"]},{"url":"https://bugzilla.suse.com/914463","tags":["report"]},{"url":"https://bugzilla.suse.com/915918","tags":["report"]},{"url":"https://bugzilla.suse.com/922033","tags":["report"]},{"url":"https://bugzilla.suse.com/927089","tags":["report"]},{"url":"https://bugzilla.suse.com/930677","tags":["report"]},{"url":"https://bugzilla.suse.com/934088","tags":["report"]},{"url":"https://bugzilla.suse.com/935701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3113","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150723-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150880-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151064-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8439","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-8439","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","status":"published","published":"2014-11-25T23:00:00Z","modified":"2025-10-22T00:05:34.383Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8276","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","status":"published","published":"2014-11-25T23:00:00Z","modified":"2025-10-22T00:05:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-05-25","updated_at":"2026-11-02T19:49:39.244432Z"}],"ghsa":[{"id":"GHSA-w62w-9g5v-w3p4","title":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and...","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","status":"published","published":"2022-05-13T01:05:54Z","modified":"2025-10-22T03:31:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-416"],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2014-8439","title":"Adobe Flash Player Dereferenced Pointer Vulnerability","description":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","cwes":["CWE-119"],"kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2014-8439","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","status":"published","published":"2014-11-25T23:59:00.053Z","modified":"2026-06-17T00:16:43.437Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119","CWE-416"],"updated_at":"2026-11-02T14:02:57.304171Z"}],"osv":[{"id":"UBUNTU-CVE-2014-8439","description":"Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK \u0026 Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","status":"published","published":"2014-11-25T23:59:00Z","modified":"2025-07-16T08:11:12.227411Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"MGASA-2014-0497","title":"Updated flash-player-plugin packages fix CVE-2014-8439","description":"Adobe Flash Player 11.2.202.424 contains additional hardening against a \nvulnerability in the handling of a dereferenced memory pointer that could \nlead to code execution (CVE-2014-8439). A mitigation was previously \nintroduced for this issue in a previous update (MGASA-2014-0448).\n","status":"published","published":"2014-11-26T17:29:06Z","modified":"2026-04-16T06:23:54.622255769Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2014:1915","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:20:42Z","modified":"2026-06-29T10:08:00Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0239-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2025-05-02T04:03:57.228408Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0493-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:08:38.331818Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0723-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:31:32.604879Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0880-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T02:39:45.191501Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1064-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:39:48.304838Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1137-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:11:51.763015Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}