CVE-2014-0518: High severity Adobe Flash Player vulnerability

Published May 14, 2014
·
Updated

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.

Affected Software

10 affected components
Adobe Flash Player>=13.0<13.0.0.214
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player>=11.0<11.2.202.359
Linux Linux kernel
Adobe Adobe AIR<13.0.0.111
All of the following
Adobe Flash Player>=13.0<13.0.0.214
Microsoft Windows
All of the following
Adobe Flash Player>=11.0<11.2.202.359
Linux Linux kernel

Event History

May 14, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:13 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2014-0518?

CVE-2014-0518 is considered a critical vulnerability due to its ability to allow attackers to bypass access restrictions.

2

How do I fix CVE-2014-0518?

To fix CVE-2014-0518, update Adobe Flash Player to version 13.0.0.214 or later, and Adobe AIR SDK to version 13.0.0.111 or later.

3

Which versions of software are affected by CVE-2014-0518?

Adobe Flash Player versions before 13.0.0.214 on Windows and OS X, and before 11.2.202.359 on Linux, along with Adobe AIR SDK versions before 13.0.0.111 are affected by CVE-2014-0518.

4

What platforms are vulnerable to CVE-2014-0518?

The vulnerable platforms for CVE-2014-0518 include Windows, OS X, and certain Linux distributions running affected versions of Adobe Flash Player and Adobe AIR SDK.

5

Is CVE-2014-0518 a different vulnerability from CVE-2014-0517?

Yes, CVE-2014-0518 is a different vulnerability from CVE-2014-0517, even though both affect Adobe Flash Player.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203