CVE-2016-1019

CVE-2016-1019 affects Adobe Flash Player 21.0.0.197 and earlier. The initial description notes remote code execution via unspecified vectors with in-the-wild activity in April 2016. Connected documents place CVE-2016-1019 among vulnerabilities embedded in Neutrino EK and referenced by CISA KEV as...

CVE-2016-1010

CVE-2016-1010 is an integer overflow vulnerability in Adobe Flash Player and Adobe AIR stack. Affected: Flash Player before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/macOS; Flash before 11.2.202.577 on Linux; Adobe AIR before 21.0.0.176 and AIR SDK/Compiler before 21.0.0.176. Cause: i...

CVE-2015-8651

CVE-2015-8651 is an Adobe Flash Player vulnerability described as an integer overflow that enables remote code execution. The initial entry lists affected Flash Player versions on Windows, OS X, and Linux, and notes exploitation to run arbitrary code via unspecified vectors. Connected sources con...

CVE-2016-0984

CVE-2016-0984 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that enables arbitrary code execution. Affected products include Flash Player Windows/macOS (before 18.0.0.329 and 19.x prior to 20.0.0.306) and Linux (before 11.2.202.569), as well as Adobe AIR bef...

CVE-2014-8439

CVE-2014-8439 describes a dereferenced memory pointer vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution. The initial entry lists multiple affected branches: Flash Player versions prior to 13.0.0.258, 14.x, and 15.x before 15.0.0.239 on Windows...

CVE-2016-0974

CVE-2016-0974 is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS) and Adobe AIR/SDK/SDK & Compiler, with affected Flash Player versions before 18.0.0.329 and 19.x/20.x before 20.0.0.306 on Windows/macOS, and Linux before 11.2.202.569; Adobe AIR before 20.0.0.260. The issue ena...

CVE-2016-0963

CVE-2016-0963 is an integer overflow vulnerability in Adobe Flash Player (Windows/macOS: before 18.0.0.333 and 19.x through 21.x before 21.0.0.182; Linux: before 11.2.202.577) and in Adobe AIR together with AIR SDK/Compiler (before 21.0.0.176). The condition allows attackers to execute arbitrary ...

CVE-2016-0983

Technical details for CVE-2016-0983 are not publicly provided in the connected documents. The EUVD entries reference malware but do not specify product/version/root cause or remediation for this CVE. Monitor for updates.

CVE-2016-1015

CVE-2016-1015 is an Adobe Flash Player type confusion vulnerability. The affected products are Flash Player on Windows and macOS (versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213) and Linux (before 11.2.202.616). The root cause is a type confusion error triggered by overriding Net...

CVE-2016-0982

CVE-2016-0982 corresponds to a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: affected versions include before 18.0.0.329 and 19.x before 20.0.0.306; Linux: before 11.2.202.569) and in Adobe AIR (before 20.0.0.260; AIR SDK before 20.0.0.260; AIR SDK & Compiler before 20.0.0.26...

CVE-2016-0973

Technical details about CVE-2016-0973 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0993

CVE-2016-0993 describes an integer overflow in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR before 21.0.0.176, including AIR SDKs, that allows attackers to execute arbitrary code via unspecified vectors. Thi...

CVE-2016-0975

CVE-2016-0975 is a use-after-free vulnerability in the Flash/Adobe AIR stack arising from improper reference handling in the instanceof function. Affected products/usages: Adobe Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows and OS X, and before 11.2.202.569 on Linux; Ad...

CVE-2015-5132

CVE-2015-5132 is a Flash Player buffer overflow vulnerability exploited via parsing of specially crafted SWF files. Affected: Windows/OS X Flash Player < 18.0.0.232; Linux Flash Player

CVE-2015-5133

Technical details about CVE-2015-5133 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the connected entries reference the CVE but do not disclose specifics here.

CVE-2015-8068

Technical details about CVE-2015-8068 are not publicly available in the provided connected documents; no concrete affected products, versions, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2015-7663

CVE-2015-7663 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.261 and 19.x prior to 19.0.0.245 on Windows/OS X, and prior to 11.2.202.548 on Linux; and Adobe AIR before 19.0.0.241 (and related SDK/Compiler). It allows attackers to execute arbitrary code via unspecif...

CVE-2015-8634

CVE-2015-8634 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: prior to 18.0.0.324 and 19.x; prior to 20.0.0.267 for 20.x) and Linux prior to 11.2.202.559, as well as in Adobe AIR before 20.0.0.233 (including AIR SDK/Compiler before 20.0.0.233). It allows attackers t...

CVE-2015-8418

CVE-2015-8418 affects Adobe Flash Player (Windows/macOS: before 18.0.0.268 and 19.x; before 20.0.0.228 for 20.x on Windows/macOS; Linux: before 11.2.202.554) and Adobe AIR (before 20.0.0.204, including AIR SDK before 20.0.0.204) with memory corruption allowing arbitrary code execution or a denial...

CVE-2015-3097

CVE-2015-3097 is an information-disclosure issue in Adobe Flash embedded in Chrome (and other Flash runtimes) where the random Flash heap address was not chosen securely, enabling an attacker to predict the address. The Mac OS X Nessus entry for Google Chrome

CVE-2015-3128

CVE-2015-3128 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: affected builds include before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: before 11.2.202.481) and in Adobe AIR/ AIR SDK/ SDK & Compiler before 18.0.0.180. The issue allows remote code execution via...

CVE-2015-8061

Technical details (affected products, versions, root cause, fixes) are not provided in the connected documents for CVE-2015-8061; monitor for updates.

CVE-2015-8459

Technical details about CVE-2015-8459 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0998

CVE-2016-0998 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows arbitrary code execution via unspecified vectors on Windows, OS X, and Linux, affecting Flash Player prior to 18.0.0.333 and 19.x–21.x before 21.0.0.182, and AIR before 21.0.0.176. The r...

CVE-2015-7655

Technical details about CVE-2015-7655 are not publicly provided in the connected documents. The EUVD entries mention malware context, but no concrete product versions, root cause, impact, or remediation are detailed here; monitor for updates.

CVE-2014-0576

CVE-2014-0576 is a memory‑corruption vulnerability in Adobe Flash Player triggered by parsing a specially crafted SWF file, potentially allowing remote arbitrary code execution. Affected products/versions include Flash Player on Windows, OS X, and Linux (per the description), plus related AIR com...

CVE-2015-3085

CVE-2015-3085 is a remote-write-bypass vulnerability in Adobe Flash Player and related AIR components. Affects Flash Player before 13.0.0.289 and 14.x up to 17.x before 17.0.0.188 (Windows/macOS) and before 11.2.202.460 (Linux), as well as Adobe AIR before 17.0.0.172, and AIR SDKs before 17.0.0.1...

CVE-2015-7651

CVE-2015-7651 involves a use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X, and before 11.2.202.548 on Linux; Adobe AIR before 19.0.0.241 and AIR SDK/Compiler before 19.0.0.241. The root cause is use-after-free via crafted DefineFuncti...

CVE-2015-8414

Technical details for CVE-2015-8414 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0960

CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...

CVE-2015-3115

Technical details for CVE-2015-3115 are not provided in the connected documents; no specifics on affected products, impact, or fixes. Monitor for updates.

CVE-2015-7632

CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...

CVE-2015-8424

Technical details for CVE-2015-8424 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-3134

Technical details about CVE-2015-3134 (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5578

The provided documents confirm CVE-2015-5578 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190). The connected advisories indicate the root cause...

CVE-2015-5582

Summary: CVE-2015-5582 affects Adobe Flash Player and Adobe AIR components. A memory corruption vulnerability in Flash Player allows remote code execution or denial of service via parsing crafted media (SWF/MP4) payloads, with exploitable conditions indicated by related advisories. Affected produ...

CVE-2015-8062

Technical details about CVE-2015-8062 are not publicly available in the provided documents. No affected product specifics, exploit information, or remediation are confirmed here. Monitor for updates.

CVE-2015-8648

CVE-2015-8648 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components. It affects Flash Player on Windows/OS X/Linux (pre-18.0.0.324, 19.x, and pre-20.0.0.267 on Windows/OS X; pre-11.2.202.559 on Linux) and Adobe AIR/AIR SDK before 20.0.0.233. The description note...

CVE-2016-1021

Technical details about CVE-2016-1021 are not publicly provided in the connected documents; monitor for updates.

CVE-2015-3100

Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...

CVE-2015-3104

CVE-2015-3104 is an integer overflow in Adobe Flash Player (Windows, macOS, Linux) and related Adobe AIR/SDK components. The flaw allows arbitrary code execution via unspecified vectors and affects Flash Player versions prior to 13.0.0.292, 14.x up to 18.x before 18.0.0.160 (Windows/macOS) and pr...

CVE-2015-5127

CVE-2015-5127 describes a use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), as well as in Adobe AIR prior to 18.0.0.199 (and related SDKs). It allows attackers to execute arbitrary code via unspecified vectors. The Initial do...

CVE-2015-7662

CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...

CVE-2015-8650

Technical details (affected product/version, root cause, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2015-3103

CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...

CVE-2015-3105

CVE-2015-3105 affects Adobe Flash Player and related AIR/SDK components. The vulnerability enables arbitrary code execution or memory-corruption-induced DoS via unspecified vectors in Flash Player and AIR across Windows, macOS, Linux, and Android, with affected versions listed in the initial desc...

CVE-2015-3118

CVE-2015-3118 is a use-after-free vulnerability affecting Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 (including AIR SDK before/Compiler before 18.0.0.180). The issue per...

CVE-2015-8065

CVE-2015-8065 is a use-after-free vulnerability in Adobe Flash Player (before 18.0.0.268 and 19.x; before 20.0.0.228 on Windows/OS X; before 11.2.202.554 on Linux) and Adobe AIR (before 20.0.0.204) that permits arbitrary code execution via unspecified vectors. Affected products/versions are liste...

CVE-2015-8444

The CVE-2015-8444 entry covers vulnerabilities in Adobe Flash Player and Adobe AIR family where: affected products include Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Com...