CVE-2018-12824

CVE-2018-12824 affects Adobe Flash Player (and the flash-plugin in distributions) prior to version 30.0.0.154. The root cause is an out-of-bounds read that can lead to information disclosure. Public advisories (APSB18-25) document multiple vulnerabilities in Flash Player 30.x and provide a securi...

CVE-2018-12827

CVE-2018-12827 concerns an out-of-bounds read in Adobe Flash Player 30.0.0.134 and earlier, leading to information disclosure. Public details consistently list Flash Player as the affected component and the root cause as an out-of-bounds read. Exploitation has been demonstrated in public advisori...

CVE-2018-12824

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-12827

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-12825

CVE-2018-12825 affects Adobe Flash Player (older than 30.0.0.154; includes all Flash Player ActiveX/NPAPI/PPAPI builds). The issue is a security bypass vulnerability described as enabling a security mitigation bypass when exploited remotely, with high severity. Adobe’s APSB18-25 notes the vulnera...

CVE-2018-12826

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-12828

Adobe Flash Player

CVE-2018-12826

Adobe Flash Player prior to 30.0.0.154 is affected by CVE-2018-12826, an out-of-bounds read vulnerability that could lead to information disclosure. Affected products include Flash Player components up to version 30.0.0.134 (and related plugin cases noted in APSB18-25). Red Hat’s RHSA-2018:2435 c...

Exploit for CVE-2017-3000

CVE-2017-3000 A full exploit of CVE-2017-3000...

MGASA-2018-0349 Updated flash-player-plugin packages fix security vulnerabilities

Updated flash-player-plugin packages fix security vulnerabilities: Out-of-bounds read that can lead to Information Disclosure CVE-2018-12824, CVE-2018-12826, CVE-2018-12827 Security bypass that can lead to Security Mitigation Bypass CVE-2018-12825 Use of a component with a known vulnerability can...

Updated flash-player-plugin packages fix security vulnerabilities

Updated flash-player-plugin packages fix security vulnerabilities: Out-of-bounds read that can lead to Information Disclosure CVE-2018-12824, CVE-2018-12826, CVE-2018-12827 Security bypass that can lead to Security Mitigation Bypass CVE-2018-12825 Use of a component with a known vulnerability can...

RHEL 6 : flash-plugin (RHSA-2018:2435)

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

flash-plugin: Security Mitigation Bypass vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass...

flash-plugin: Privilege Escalation vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation...

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Patch Tuesday, August 2018 Edition

Adobe and Microsoft each released security updates for their software on Tuesday. Adobe plugged five security holes in its Flash Player browser plugin. Microsoft pushed 17 updates to fix at least 60 vulnerabilities in Windows and other software, including two "zero-day" flaws that attackers were...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2018-16200)

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A security bypass vulnerability exists in Adobe Flash Player. A remote attacker could exploit...

Adobe Flash Player Within Google Chrome Security Update (APSB18-25) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

Adobe Flash Player Within Google Chrome Security Update (APSB18-25) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...