CVE-2019-7090

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-24 · updated 2026-06-17
Weakness: CWE-125

Description

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected products

Adobe Flash Player 24.0.0.186 and earlier.: through 32.0.0.114
Adobe Flash Player Desktop Runtime: through 32.0.0.114

References

https://helpx.adobe.com/security/products/flash-player/apsb19-06.html
https://helpx.adobe.com/security/products/flash-player/apsb19-06.html

Get alerted when CVE-2019-7090 or the next vulnerability affects your stack