CVE-2019-8069

CRITICAL

9.8

CVSS Score

Published: September 12, 2019 at 06:04 PM UTC

Updated: June 17, 2026 at 02:41 AM UTC

2 products affected across 1 vendorFlash PlayerFlash Player Desktop Runtime· also runs on 6 platforms

Using Flash Player by Adobe?

Get instant alerts when new vulnerabilities affect Flash Player - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 4%

Description

Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Flash Player · Adobe

95%

v ≤ 32.0.0.207v ≤ 32.0.0.238

apple-macos (environment) · google-chrome-os (environment) · linux-linux-kernel (environment) · microsoft-windows (environment) · microsoft-windows-10 (environment) · microsoft-windows-8-1 (environment)

Flash Player Desktop Runtime · Adobe

95%

v ≤ 32.0.0.238

apple-macos (environment) · linux-linux-kernel (environment) · microsoft-windows (environment)