CVE-2014-9163

CWE-121

Critical

90.7

RPS

Description

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

Source: NVD

CVSS: 7.8; High · v3.1
EPSS: 20.72%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Apr 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-121
Published: 10 Dec 2014; Last modified 21 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2014-9163

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2014-9163

Description

Signals

Get this score from the API