Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-7090

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Published

2019-05-24T19:29:02.783

Last Modified

2024-11-21T04:47:32.540

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe flash_player_desktop_runtime ≤ 32.0.0.114 Yes
Operating System apple macos - No
Operating System google chrome_os - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 32.0.0.114 Yes
Operating System apple macos - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 32.0.0.114 Yes
Application adobe flash_player ≤ 32.0.0.114 Yes
Operating System microsoft windows_10 * No
Operating System microsoft windows_8.1 * No
References