CVE-2015-8651

CVE-2015-8651 is an Adobe Flash Player vulnerability described as an integer overflow that enables remote code execution. The initial entry lists affected Flash Player versions on Windows, OS X, and Linux, and notes exploitation to run arbitrary code via unspecified vectors. Connected sources con...

CVE-2014-8439

CVE-2014-8439 describes a dereferenced memory pointer vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution. The initial entry lists multiple affected branches: Flash Player versions prior to 13.0.0.258, 14.x, and 15.x before 15.0.0.239 on Windows...

CVE-2014-0576

CVE-2014-0576 is a memory‑corruption vulnerability in Adobe Flash Player triggered by parsing a specially crafted SWF file, potentially allowing remote arbitrary code execution. Affected products/versions include Flash Player on Windows, OS X, and Linux (per the description), plus related AIR com...

CVE-2014-8440

CVE-2014-8440 is a memory‑corruption vulnerability in Adobe Flash Player’s ByteArray::UncompressViaZlibVariant that can lead to arbitrary code execution or crash via uninitialized memory. Affected products/versions (per initial description): Flash Player before 13.0.0.252 and 14.x and 15.x before...

CVE-2014-0574

CVE-2014-0574 is a double-free vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution via unspecified vectors. Public disclosures tie the issue to the Flash update APSB14-24; patches/updates were released (e.g., Flash Player 11.2.202.418 for some p...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...

CVE-2014-0581

CVE-2014-0581 is a memory‑corruption vulnerability in Adobe Flash Player caused by an error in parsing a specially crafted SWF file, reported across multiple advisories. The flaw can allow a remote attacker to corrupt memory, with potential for arbitrary code execution, as described by CPAI advis...

CVE-2014-0584

CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...

CVE-2014-0590

CVE-2014-0590 is a type-confusion vulnerability in Adobe Flash Player that could allow remote code execution via a specially crafted SWF file. According to the provided documents, affected versions include Flash Player before 13.0.0.252 and 14.x, and before 15.0.0.223 on Windows and OS X, plus be...

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...

CVE-2014-0585

CVE-2014-0585 is a type-confusion vulnerability in Adobe Flash Player that can enable remote code execution. Affected products/versions (as stated in the provided docs) include Flash Player on Windows/macOS prior to 13.0.0.252 and prior to 15.0.0.223 for 14.x/15.x, and Flash Player on Linux prior...

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2014-0588

CVE-2014-0588 is a use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and before 15.0.0.356 on Windows/OS X, and before 11.2.202.418 on Linux, plus Adobe AIR before 15.0.0.356 (and AIR SDK variants). The issue allows arbitrary code execution via unspecified vectors and ...

CVE-2014-0589

CVE-2014-0589 is a heap-based buffer overflow in Adobe Flash Player that enables arbitrary code execution. Affected: Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/OS X, and before 11.2.202.418 on Linux; Adobe AIR before 15.0.0.356 (AIR SDK and Compiler before 15.0.0.356) wi...

CVE-2014-8442

Adobe Flash Player (and related AIR components) versions prior to the patches cited in CVE-2014-8442 suffer from an incorrect permission configuration that enables an attacker to escalate from Low to Medium integrity. The CVE is described as a privilege-escalation issue caused by permission handl...

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8437

CVE-2014-8437 is an information-disclosure vulnerability in Adobe Flash Player and related AIR components that could allow a remote attacker to disclose session tokens. Affected products include Flash Player on Windows, OS X (before 13.0.0.252 and before 15.0.0.223 on 14.x/15.x), and Linux (befor...