Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2014-8439

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

  • Published: Nov 25, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2014-8439
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
adobe / flash_player - 11.2.202.418.x
adobe / air_sdk - 15.0.0.301.x
adobe / air - 15.0.0.292.x
adobe / flash_player - 15.0.0.223.x
adobe / flash_player - 13.0.0.252.x
adobe / air_sdk_&_compiler - 15.0.0.302