AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2014-8438

HIGH · CVSS 10 EPSS 9.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2014-8438
Severity
HIGH
CVSS
10
EPSS
9.93%
Windows Linux

Original Filing — NVD Description

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0573 and CVE-2014-0588.