VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 11, 2014· Updated Jun 17, 2026

CVE-2014-0586

CVE-2014-0586

Description

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.

Affected products

7
  • Adobe Inc./Air2 versions
    cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*range: <=15.0.0.356
    • (no CPE)range: <15.0.0.356
  • Adobe Inc./Air SDK2 versions
    cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*range: <=15.0.0.356
    • (no CPE)range: <15.0.0.356
  • Adobe Inc./Air Sdk \& Compiler
    cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*
    Range: <15.0.0.356
  • Adobe Inc./Flashplayer2 versions
    cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*range: >=13.0,<13.0.0.252
    • (no CPE)range: <13.0.0.252 || (14.x <15.0.0.223 on Windows/OS X) || <11.2.202.418 on Linux

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.