CVE-2019-8070

—

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Sep 12, 2019 (Sep 12, 2019)

Modified

Jun 17, 2026

Description

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

Vendors: adobe
Products: flash player desktop runtime, flash player
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news2 stories

Adobe September 2019 Patch Tuesday updates fix 2 code execution flaws in Flash Player

Security AffairsSep 11, 06:29 UTC · Sep 11, 2019Vulnerability CVE-2019-8070 CVE-2019-8069 CVE-2019-8076

Adobe Releases Security Patches For Critical Flash Player Vulnerabilities

The Hacker NewsSep 10, 15:31 UTC · Sep 10, 2019Vulnerability in the wildCVE-2019-8069 CVE-2019-8070 CVE-2019-8076