{"id":"CVE-2014-0502","published":"2014-02-21T05:07:00Z","modified":"2026-06-17T00:03:09Z","title":"Adobe Flash Player Double Free Vulnerablity","vendor":"Adobe","product":"Flash Player","tier":"core","eol":null,"description":{"text":"Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","provenance":"source","from":"NVD"},"summary":{"text":"A double free vulnerability in Adobe Flash Player, affecting its Windows, Mac OS X and Linux builds, and Adobe AIR and AIR SDK components on Android and other platforms, as described in the affected version ranges. An remote attacker with no privileges can execute arbitrary code by exploiting unspecified vectors, but user interaction is required to trigger the flaw.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:10:35Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.24817,"percentile":0.97896,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2024-09-17","dueDate":"2024-10-08","ransomware":false,"requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0502","provenance":"source"},"vulncheckKev":{"dateAdded":"2014-02-21","exploitedFirstSeen":"2014-02-21","ransomware":false,"evidence":[{"url":"https://cybersecurity.att.com/blogs/labs-research/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502","date":"2014-02-21"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0502","date":"2014-02-21"},{"url":"https://www.scribd.com/document/516749423/inzimam-2019-ijca-919742","date":"2019-12-26"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2024-09-17"}],"evidenceTotal":4,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-415","name":"Double Free"},{"id":"CWE-399","name":null}],"references":[{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-07.html","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0196.html","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201405-04.xml","tags":["Third Party Advisory"]},{"url":"http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/","tags":["Exploit","Third Party Advisory"]},{"url":"https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html","tags":["Exploit","Third Party Advisory"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-07.html","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0196.html","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201405-04.xml","tags":["Third Party Advisory"]},{"url":"http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/","tags":["Exploit","Third Party Advisory"]},{"url":"https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0502","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Drive-by via remote crafted content in browser","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows remote attackers to execute arbitrary code via unspecified vectors","start":289,"end":362}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Flash Player client-side code execution","mappingType":"primary_impact","evidence":[{"from":"description","quote":"Double free vulnerability in Adobe Flash Player before 11.7.700.269","start":0,"end":67}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2014-0533","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0533","exploited":true,"exploitedSince":"2024-09-17","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":["http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/","https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203"],"provenance":"ai"}],"timeline":[{"date":"2014-02-21","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0502","provenance":"source"},{"date":"2014-02-21","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://cybersecurity.att.com/blogs/labs-research/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502","provenance":"source"},{"date":"2024-09-17","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2024-09-17","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0533","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":3861},"priority":{"score":68.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4633 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.58,"detail":"percentile 0.9790"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}