ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.opera.com/docs/changelogs/windows/951/	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/30937	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2008/1998/references	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Resource:

x_refsource_CONFIRM

x_transferred

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:09 Jul, 2008 | 00:41

Updated At:23 Apr, 2026 | 00:35

Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>windows>>*

Opera

>>opera>>Versions up to 9.51(inclusive)

cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/30937	cve@mitre.org	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/1998/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	cve@mitre.org	N/A
http://secunia.com/advisories/30937	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.opera.com/docs/changelogs/windows/951/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/1998/references	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/43576	af854a3a-2127-422b-91ae-364da2661108	N/A

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: cve@mitre.org

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.opera.com/docs/changelogs/windows/951/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1998/references

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/43576

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1323Records found

CVE-2013-5330

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.95% / 86.60%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-4038

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-67.89% / 98.60%

7 Day CHG~0.00%

Published-15 Oct, 2008 | 00:00

Updated-23 Apr, 2026 | 00:35

Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via a Server Message Block (SMB) request that contains a filename with a crafted length, aka "SMB Buffer Underflow Vulnerability."

Product-windows_server_2008 windows_vista windows_xp windows_2000 windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-16455

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.60% / 85.78%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:51

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3009

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-52.28% / 97.95%

7 Day CHG~0.00%

Published-10 Dec, 2008 | 13:33

Updated-23 Apr, 2026 | 00:35

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."

Product-windows_server_2008 windows_media_format_runtime windows_vista windows_xp windows_media_services windows_2000 windows_media_player windows_server_2003 n/a

CVE-2019-16459

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.58%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:56

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2008-2161

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-78.90% / 99.07%

7 Day CHG~0.00%

Published-12 May, 2008 | 22:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a long TFTP error packet. NOTE: some of these details are obtained from third party information.

Vendor-tftp n/a Microsoft Corporation

Product-all_windows tftp_server_sp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0075

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-68.58% / 98.64%

7 Day CHG~0.00%

Published-12 Feb, 2008 | 20:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.

Product-internet_information_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-0080

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-37.81% / 97.26%

7 Day CHG~0.00%

Published-12 Feb, 2008 | 22:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vista allows remote attackers to execute arbitrary code via a crafted WebDAV response.

Product-windows_vista windows_xp webdav_mini-redirector windows_2003_server windows_server_2003 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0296

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-11.64% / 93.73%

7 Day CHG~0.00%

Published-16 Jan, 2008 | 21:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows might allow remote RTSP servers to cause a denial of service (application crash) or execute arbitrary code via a long string.

Vendor-n/a VideoLAN Microsoft Corporation

Product-vlc_media_player windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0768

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.72% / 89.50%

7 Day CHG~0.00%

Published-13 Feb, 2008 | 21:00

Updated-23 Apr, 2026 | 00:35

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.

Vendor-n/a Microsoft Corporation IBM Corporation

Product-informix_dynamic_server windows informix_storage_manager n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0437

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-32.49% / 96.92%

7 Day CHG~0.00%

Published-23 Jan, 2008 | 21:00

Updated-23 Apr, 2026 | 00:35

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

Vendor-n/a HP Inc.Microsoft Corporation

Product-activex virtual_rooms n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-6048

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.76% / 73.52%

7 Day CHG~0.00%

Published-20 Nov, 2007 | 20:00

Updated-23 Apr, 2026 | 00:35

IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.

Vendor-unix n/a IBM Corporation Microsoft Corporation Linux Kernel Organization, Inc

Product-windows linux_kernel unix db2_universal_database n/a

CVE-2013-1320

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-62.07% / 98.36%

7 Day CHG~0.00%

Published-15 May, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."

Product-publisher n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1528

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-1.26% / 79.62%

7 Day CHG~0.00%

Published-30 Apr, 2014 | 10:00

Updated-06 May, 2026 | 22:30

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.

Vendor-n/a Canonical Ltd.openSUSE Oracle Corporation Mozilla Corporation Microsoft Corporation Fedora Project

Product-firefox ubuntu_linux seamonkey solaris windows fedora opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-1551

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.41% / 90.23%

7 Day CHG~0.00%

Published-23 Jul, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arbitrary code via crafted use of fonts in MathML content, leading to improper handling of a DirectWrite font-face object.

Vendor-n/a Mozilla Corporation Microsoft Corporation

Product-thunderbird firefox firefox_esr windows n/a

CVE-2009-4741

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.41% / 61.68%

7 Day CHG~0.00%

Published-26 Mar, 2010 | 20:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors.

Vendor-skype n/a Microsoft Corporation

Product-windows skype n/a

CVE-2007-3341

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-36.02% / 97.15%

7 Day CHG~0.00%

Published-21 Jun, 2007 | 23:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217.

Product-all_windows internet_explorer n/a

CVE-2014-0495

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.85% / 89.64%

7 Day CHG~0.00%

Published-15 Jan, 2014 | 02:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0493.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0574

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.79% / 93.79%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0564

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.12% / 90.89%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-evergreen linux_enterprise_desktop windows_8.1 windows_8 windows flash_player macos air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime opensuse n/a

CVE-2014-0456

Matching Score-8

Assigner-Oracle

Vendor-n/a Canonical Ltd.Juniper Networks, Inc.IBM Corporation Oracle Corporation Microsoft Corporation Debian GNU/Linux

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-6.33% / 91.07%

7 Day CHG+0.42%

Published-16 Apr, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Product-jrockit debian_linux ubuntu_linux jdk jre junos_space forms_viewer windows n/a

CVE-2007-3111

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-51.26% / 97.91%

7 Day CHG~0.00%

Published-07 Jun, 2007 | 21:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4, allows remote attackers to execute arbitrary code via a long URL property value.

Vendor-provideo n/a Microsoft Corporation

Product-internet_explorer camimage_activex_control windows_2000 n/a

CVE-2014-0525

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-31.31% / 96.83%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-0577

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.31% / 93.95%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0584

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.31% / 93.95%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0551

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0576

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.70% / 93.01%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0581, CVE-2014-8440, and CVE-2014-8441.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-0555

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0568

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.36% / 90.17%

7 Day CHG~0.00%

Published-17 Sep, 2014 | 10:00

Updated-06 May, 2026 | 22:30

The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.

Vendor-n/a Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader windows n/a

CVE-2014-0557

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.54% / 85.63%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0581

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.70% / 93.01%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-8440, and CVE-2014-8441.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-0561

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-37.46% / 97.24%

7 Day CHG~0.00%

Published-17 Sep, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0567.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0529

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-14.80% / 94.58%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0493

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.55% / 94.02%

7 Day CHG~0.00%

Published-15 Jan, 2014 | 02:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0502

Matching Score-8

Matching Score-8

Product-adobe_air mac_os_x linux_enterprise_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop adobe_air_sdk windows flash_player enterprise_linux_server_aus enterprise_linux_eus android linux_kernel opensuse n/a air_sdk flash_player air Flash Player

CVSS Score-8.8||HIGH

EPSS-90.63% / 99.63%

7 Day CHG~0.00%

Published-21 Feb, 2014 | 02:00

Updated-21 Apr, 2026 | 21:11

Known KEV||Action Due Date - 2024-10-08||The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-415

Double Free

CVE-2014-0522

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.29% / 92.32%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0523, CVE-2014-0524, and CVE-2014-0526.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0547

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0546

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-28.44% / 96.58%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 21:00

Updated-21 Apr, 2026 | 21:12

Known KEV||Action Due Date - 2022-06-15||Apply updates per vendor instructions.

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Vendor-n/a Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader windows n/a Reader and Acrobat

CVE-2014-0588

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.17% / 92.26%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-8438.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-0526

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.47% / 93.99%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0528

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-14.84% / 94.59%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-0549

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0544

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.23% / 79.41%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0496

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-71.12% / 98.73%

7 Day CHG+4.88%

Published-15 Jan, 2014 | 02:00

Updated-21 Apr, 2026 | 21:11

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-acrobat windows mac_os_x n/a Reader and Acrobat

CWE ID-CWE-416

Use After Free

CVE-2014-0553

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.62% / 82.04%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-android adobe_air mac_os_x adobe_air_sdk windows flash_player suse_linux_enterprise_desktop linux_kernel opensuse n/a

CVE-2014-0585

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.05% / 92.20%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0586, and CVE-2014-0590.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0573

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.24% / 92.30%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-0587

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.80% / 93.43%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0580

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.66% / 85.94%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2014-0560

Matching Score-8

Matching Score-8