CVE-2014-0515

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

• CWE-119

• http://helpx.adobe.com/security/products/flash-player/apsb14-13.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0447.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory
• http://www.securityfocus.com/bid/67092Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030155Third Party Advisory, VDB Entry
• http://helpx.adobe.com/security/products/flash-player/apsb14-13.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0447.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory
• http://www.securityfocus.com/bid/67092Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030155Third Party Advisory, VDB Entry

Published

Apr 29, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0509Cross-site scripting (XSS) vulnerability in Adobe Flash Play…
• CVE-2014-0510Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 a…
• CVE-2014-0511Heap-based buffer overflow in Adobe Reader 11.0.06 allows re…
• CVE-2014-0512Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbo…
• CVE-2014-0513Stack-based buffer overflow in Adobe Illustrator CS6 before …
• CVE-2014-0514The Adobe Reader Mobile application before 11.2 for Android …
• CVE-2014-0516Adobe Flash Player before 13.0.0.214 on Windows and OS X and…
• CVE-2014-0517Adobe Flash Player before 13.0.0.214 on Windows and OS X and…
• CVE-2014-0518Adobe Flash Player before 13.0.0.214 on Windows and OS X and…
• CVE-2014-0519Adobe Flash Player before 13.0.0.214 on Windows and OS X and…
• CVE-2014-0520Adobe Flash Player before 13.0.0.214 on Windows and OS X and…
• CVE-2014-0521Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before…