CVE-2014-0502

CWE-415

Critical

96.8

RPS

Description

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Source: NVD

CVSS: 8.8; High · v3.1
EPSS: 24.81%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Sept 2024
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-415
Published: 21 Feb 2014; Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2014-0502

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2014-0502

Description

Signals

Get this score from the API