CVE catalog

CVE-2014-0533

UBUNTU-CVE-2014-0533

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.73% · Oct 25, 2026

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuflashplugin-nonfree14.0411.2.202.310ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.327ubuntu0.13.10.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.332ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.335ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.336ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.341ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.346ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.350ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.356ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.359ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.378ubuntu0.14.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuflashplugin-nonfreedeb14.0411.2.202.378ubuntu0.14.04.1Not reportedUBUNTU-CVE-2014-0533Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]