CVE-2019-7090: Adobe Flash Player

Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days.

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected products

• Adobe Flash Player: up to and including 32.0.0.114
• Adobe Flash Player Desktop Runtime: up to and including 32.0.0.114

Published 2019-05-24. Last modified 2026-06-17.