CVE-2019-8075: Adobe Flash Player

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Affected products

• Adobe Flash Player: up to and including 32.0.0.207
• Adobe Flash Player Desktop Runtime: up to and including 32.0.0.207
• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Google Chrome: before 87.0.4280.66 (fixed in 87.0.4280.66); before 87.0.4280.67 (fixed in 87.0.4280.67)

Published 2019-09-27. Last modified 2026-06-17.