CVE-2014-9163

State: Published
Severity: 7.8 High
Published: Dec 10, 2014
Updated: Nov 17, 2025
Reserved: Dec 1, 2014

Description

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://helpx.adobe.com/security/products/flash-player/apsb14-27.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-9163government-resource
https://github.com/cisagov/vulnrichment/issues/196issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.