CVE-2019-7845

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Adobe	Adobe Flash Player	32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192  and earlier versions

References

https://access.redhat.com/errata/RHSA-2019:1476Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb19-30.htmlVendor Advisory
https://security.gentoo.org/glsa/201908-21Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1476Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb19-30.htmlVendor Advisory
https://security.gentoo.org/glsa/201908-21Third Party Advisory

Timeline

Published: Jun 12, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-78467.5Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation coul CVE-2019-78477.5Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulne CVE-2019-78487.5Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation co CVE-2019-78497.5A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.CVE-2019-78509.8Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead CVE-2019-78516.5A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead t CVE-2019-78525.3A path disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Requests for CVE-2019-78534.8A stored cross-site scripting vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. T CVE-2019-78547.5An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.CVE-2019-78555.3A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthentic CVE-2019-78574.3A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause CVE-2019-78587.5A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensit