Double free

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution...

Buffer overflow

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7869

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7880

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2016-7876

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7878

CVE-2016-7878 affects Adobe Flash Player (PC/Linux) with use-after-free in the PSDK MediaPlayer class, enabling arbitrary code execution. Affected versions: Flash Player 23.0.0.207 and earlier (Windows/other builds indicated in CVE list). Public advisories confirm the flaw and note escalation to ...

CVE-2016-7892

CVE-2016-7892 affects Adobe Flash Player and is due to a use-after-free in the TextField class, leading to arbitrary code execution. Affected versions: 23.0.0.207 and earlier, 11.2.202.644 and earlier. Industry advisories (e.g., Arch Linux ASA entries) indicate remediation by upgrading to Flash P...

CVE-2016-7868

Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...

CVE-2016-7880

CVE-2016-7880 affects Adobe Flash Player up to version 23.0.0.207 / 11.2.202.644, where an exploitable use-after-free occurs when setting the length property of an array, potentially enabling arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 (and...

CVE-2016-7873

CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...

CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

CVE-2016-7873

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7867

CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2016-7870

CVE-2016-7870 affects Adobe Flash Player versions 23.0.0.207 and earlier (Windows, Linux, etc.) with a buffer overflow/underflow in the RegExp class used for specific search strategies. Successful exploitation could lead to arbitrary code execution. Mitigation: upgrade to Flash Player 24.0.0.186 ...