CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-11-25
Adobe Flash Player and AIR Invalid Pointer Dereference Remote Code Execution (CVE-2014-8439)
[Affected Scope] Adobe Flash Player before 13.0.0.258, 14.x/15.x before 15.0.0.239 (Windows/macOS), before 11.2.202.424 (Linux), and AIR/SDK before 15.0.0.293/302
[Impact] Attackers can execute arbitrary code or trigger a Denial of Service (DoS) via memory corruption on the target system
[Mitigation] Immediately uninstall legacy Adobe Flash Player components or restrict execution via browser policies and upgrade AIR SDK to secure versions