CVE-2019-7837

—

CVSS 3.0

8.8 high

EPSS

10%p95

Published

May 22, 2019 (May 22, 2019)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe redhat
Products: flash player desktop runtime, flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-416
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.7%)

In the news2 stories

Adobe Patch Tuesday patches fix over 80 flaws in Flash, Acrobat Reader, and Media Encoder

Security AffairsMay 15, 06:14 UTC · May 15, 2019Vulnerability CVE-2019-7837 CVE-2019-7842

Adobe Releases Critical Patches for Flash, Acrobat Reader, and Media Encoder

The Hacker NewsMay 15, 00:00 UTC · May 15, 2019Vulnerability in the wildCVE-2019-7837 CVE-2019-7842