← Back

CVE-2019-7090

nvd nist
Published: May 24, 2019Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected (4)

Adobe
2 products
Flash Player Desktop Runtime
Flash Player
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player Desktop Runtime
Up to 32.0.0.114
Running on/withPlatform Versions
Google
Chrome Os
All versions
Configuration B
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Flash Player
Up to 32.0.0.114
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration C
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Flash Player
Up to 32.0.0.114
Flash Player
Up to 32.0.0.114
Running on/withPlatform Versions
Microsoft
Windows 10
All versions
Microsoft
Windows 8.1
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.