CVE-2014-0515: Adobe Flash Player

High severity, CVSS 10.0. EPSS: 94.5% chance of exploitation in the next 30 days.

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

Affected products

• Adobe Flash Player: from 11.0, before 11.2.202.346 (fixed in 11.2.202.346); from 11.0, before 11.7.700.279 (fixed in 11.7.700.279); from 11.8, before 13.0.0.206 (fixed in 13.0.0.206)

Published 2014-04-29. Last modified 2026-06-17.