CVE-2019-7845

—

CVSS 3.1

8.8 high

EPSS

6%p92

Published

Jun 12, 2019 (Jun 12, 2019)

Modified

Jun 17, 2026

Description

Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe redhat
Products: flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news3 stories

June 2019 Patch Tuesday: A little something for everybody

Help Net SecurityJun 12, 00:00 UTC · Jun 12, 2019Vulnerability in the wildCVE-2019-7845 CVE-2019-1069 CVE-2019-0941+1 CVEs

Adobe Patch Tuesday updates fix code execution issues in Campaign, ColdFusion, and Flash

Security AffairsJun 11, 22:36 UTC · Jun 11, 2019Vulnerability CVE-2019-7838 CVE-2019-7839 CVE-2019-7840+2 CVEs

Adobe Issues Critical Patches for ColdFusion, Flash Player, Campaign

The Hacker NewsJun 11, 18:45 UTC · Jun 11, 2019Vulnerability in the wildCVE-2019-7838 CVE-2019-7839 CVE-2019-7840+2 CVEs