{"id":"CVE-2019-7090","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-7090","generatedAt":"2026-10-27T23:38:09.853Z","title":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read…","description":"Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft Edge and Internet Explorer 11 versions 32.0.0.114 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.","published":"2019-05-24T19:29:03.000Z","lastModified":"2026-06-17T02:40:04.000Z","status":"Modified","sourceIdentifier":"psirt@adobe.com","cvss":{"version":"3.0","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"},"cwe":["CWE-125"],"affected":["adobe/flash player desktop runtime","adobe/flash player"],"epss":{"score":0.04795,"percentile":0.91878,"date":"2026-10-26","history":[{"date":"2026-09-21","score":0.03238,"percentile":0.87733},{"date":"2026-09-22","score":0.04795,"percentile":0.91536}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (4.79%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://helpx.adobe.com/security/products/flash-player/apsb19-06.html","tags":["Vendor Advisory"],"source":"psirt@adobe.com"},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb19-06.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-7090","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}