CVE-2014-0508

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-08 · updated 2026-06-17
Weakness: CWE-264

Description

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Affected products

Adobe Air: through 4.0.0.1390; 1.0, 1.0.1, 1.0.8.4990, 1.0.4990, 1.1, 1.1.0.5790 (+50)
Adobe Air Sdk: through 4.0.0.1628; 3.0.0.4080, 3.1.0.488, 3.2.0.2070, 3.3.0.3650, 3.3.0.3690, 3.4.0.2540 (+17)
Adobe Flash Player 24.0.0.186 and earlier.: through 11.2.202.346; 11.0, 11.0.1.152, 11.0.1.153, 11.1, 11.1.102.55, 11.1.102.59 (+71)

References

Get alerted when CVE-2014-0508 or the next vulnerability affects your stack