CVE-2014-8439

CWE-119

Critical

96.6

RPS

Description

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Source: NVD

CVSS: 8.8; High · v3.1
EPSS: 20.36%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since May 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-119; CWE-119, CWE-416
Published: 25 Nov 2014; Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2014-8439

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2014-8439

Description

Signals

Get this score from the API