CVE-2014-0540

no score yetEPSS 4.0%

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:adobe_air
adobe:adobe_air_sdk
adobe:flash_player

References

http://helpx.adobe.com/security/products/flash-player/apsb14-18.html
http://secunia.com/advisories/60710
http://secunia.com/advisories/60732
http://security.gentoo.org/glsa/glsa-201408-05.xml
http://www.securitytracker.com/id/1030712

Check your stack JSON