Is CVE-2014-0503 being actively exploited?

CVE-2014-0503 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-0503?

CVE-2014-0503 has a CVSS 2.0 base score of 6.4 (MEDIUM).

CVE-2014-0503

MEDIUM · CVSS 6.4EPSS 4.4%EU EUVD

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Key facts

CVSS score: 6.4 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Weakness (CWE): CWE-264
EPSS score: 4.4% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-0534)
Published: March 12, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-0534 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

adobe / flash player
apple / mac os x
linux / linux kernel
microsoft / windows

References

http://helpx.adobe.com/security/products/flash-player/apsb14-08.html(Vendor Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html(Mailing List, Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html(Mailing List, Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2014-0289.html(Third Party Advisory)
http://security.gentoo.org/glsa/glsa-201405-04.xml(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain