Search vulnerabilities

Results 2,881

Export CSV
CVE-2019-8075

flash-plugin: Same origin policy bypass leading to information disclosure

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Adobe Apple Debian and 5 more
CVE-2019-8070

flash-plugin: Arbitrary Code Execution vulnerabilities (APSB19-46)

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-8069

flash-plugin: Arbitrary Code Execution vulnerabilities (APSB19-46)

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

CVSS 3.1 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-7845

flash-plugin: Arbitrary Code Execution vulnerability (APSB19-30)

Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 5.5% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
CVE-2019-7837

flash-plugin: Arbitrary Code Execution vulnerability (APSB19-26)

Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 9.7% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-7108

flash-plugin: Information Disclosure vulnerability (APSB19-19)

Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-7096

flash-plugin: Arbitrary Code Execution vulnerability (APSB19-19)

Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-7090

flash-plugin: Information Disclosure vulnerability (APSB19-06)

Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.0 · 6.5 Medium EPSS 4.8% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
CVE-2019-1488

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2019-1484

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

CVSS 3.1 · 7.8 High EPSS 9.5% KEV · Not listed
Vendors
Products
CVE-2019-1474

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1472.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2019-1470

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

CVSS 3.1 · 6.0 Medium EPSS 6.7% KEV · Not listed
Vendors
Products
CVE-2019-1469

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2019-1468

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.

CVSS 3.1 · 8.8 High EPSS 17.7% KEV · Not listed
Vendors
Products
CVE-2019-1467

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1466.

CVSS 3.1 · 6.5 Medium EPSS 6.0% KEV · Not listed
Vendors
Products
CVE-2019-1466

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.

CVSS 3.1 · 6.5 Medium EPSS 6.0% KEV · Not listed
Vendors
Products
CVE-2019-1465

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466, CVE-2019-1467.

CVSS 3.1 · 6.5 Medium EPSS 6.0% KEV · Not listed
Vendors
Products
CVE-2019-1456

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts, aka 'OpenType Font Parsing Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1419.

CVSS 3.1 · 8.8 High EPSS 9.7% KEV · Not listed
Vendors
Products