{"id":"CVE-2019-7090","aliases":["EUVD-2019-16641","GHSA-49vj-5fcp-ch84","MGASA-2019-0090","RHSA-2019:0348"],"status":"published","title":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome...","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04795,"percentile":0.92014,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-02-17T17:17:45Z","modified":"2026-06-29T10:23:40Z","fixes":[{"ecosystem":"Mageia:6","package":"flash-player-plugin","fixed_in":["32.0.0.142-1.mga6.nonfree"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","fixed_in":["0:32.0.0.142-1.el6_10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.0.142-1.mga6.nonfree"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.0.0.142-1.el6_10"}]}]}],"products":[{"vendor":"adobe","product":"flash player desktop runtime"},{"vendor":"adobe","product":"flash player for google chrome"},{"vendor":"adobe","product":"flash player for microsoft edge and internet explorer 11"},{"vendor":"adobe","product":"flash_player"},{"vendor":"adobe","product":"flash_player_desktop_runtime"}],"references":[{"url":"https://helpx.adobe.com/security/products/flash-player/apsb19-06.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7090","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-49vj-5fcp-ch84"},{"url":"https://advisories.mageia.org/MGASA-2019-0090.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24363","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0348","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676575","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0348.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-7090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-7090","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-7090","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","status":"published","published":"2019-05-24T18:41:31Z","modified":"2024-08-04T20:38:33.014Z","updated_at":"2026-11-02T14:32:22.854093Z"}],"euvd":[{"id":"EUVD-2019-16641","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","status":"published","published":"2019-05-24T18:41:31Z","modified":"2024-08-04T20:38:33Z","updated_at":"2026-11-03T03:06:46.960087Z"}],"ghsa":[{"id":"GHSA-49vj-5fcp-ch84","title":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome...","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","status":"published","published":"2022-05-24T16:46:45Z","modified":"2023-01-28T05:05:37Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:44:21.953506Z"}],"nvd":[{"id":"CVE-2019-7090","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","status":"published","published":"2019-05-24T19:29:02.783Z","modified":"2026-06-17T02:40:03.92Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:14.729983Z"}],"osv":[{"id":"RHSA-2019:0348","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T21:58:42Z","modified":"2026-06-29T10:23:40Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"MGASA-2019-0090","title":"Updated flash-player-plugin packages fix security vulnerability","description":"Information disclosure in the context of the current user. (CVE-2019-7090)\n","status":"published","published":"2019-02-17T17:17:45Z","modified":"2026-04-16T04:44:22.255241385Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}