CVE-2010-1297

CVE-2010-1297 affects Adobe Flash Player (versions prior to 9.0.277.0 and 10.x prior to 10.1.53.64), Adobe AIR (prior to 2.0.2.12610), and Adobe Reader/Acrobat (8.x up to 8.2.3; 9.x prior to 9.3.3) on Windows and macOS. The root cause is memory corruption/remote code execution via crafted SWF con...

CVE-2015-8651

CVE-2015-8651 is an Adobe Flash Player vulnerability described as an integer overflow that enables remote code execution. The initial entry lists affected Flash Player versions on Windows, OS X, and Linux, and notes exploitation to run arbitrary code via unspecified vectors. Connected sources con...

CVE-2013-5330

CVE-2013-5330 is a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, arising from an error in parsing specially crafted SWF files. Affected versions include Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows/macOS, and Linux...

CVE-2013-5331

Adobe Flash Player vulnerability CVE-2013-5331 is a type-confusion remote code execution issue affecting Flash Player on Windows, macOS and Linux prior to patched versions (e.g., 11.2.202.332 for many distributions; 11.9.900.170 in some branches). Exploitation was observed in the wild around Nove...

CVE-2012-5278

CVE-2012-5278 is one of multiple vulnerabilities affecting Adobe Flash Player and Adobe AIR; the issue allows bypassing intended access restrictions and arbitrary code execution. Public details in connected advisories identify Flash Player variants affected (Windows, Mac, Linux, Android) and indi...

CVE-2013-5324

CVE-2013-5324 relates to memory corruption in Adobe Flash Player and Adobe AIR. Affected components include Flash Player on Windows, macOS, Linux, Android (various versions) and Adobe AIR/SDK. The vulnerability could allow attackers to execute arbitrary code or cause a denial of service via memor...

CVE-2012-4163

CVE-2012-4163 is a memory-corruption/remote-code-execution vulnerability in Adobe Flash Player (and related Adobe AIR ) that could be exploited via unspecified vectors. Affected versions include Flash Player on Windows/Mac OS X prior to 10.3.183.23 and 11.x prior to 11.4.402.265, Linux prior to 1...

CVE-2012-4167

Adobe Flash Player and Flash plugin are affected by CVE-2012-4167 due to an integer overflow, enabling arbitrary code execution via unspecified vectors. This impacts multiple platforms and product lines (Windows, macOS, Linux, Android) prior to the specified fixed versions in the advisories. Red ...

CVE-2012-5677

CVE-2012-5677 affects Adobe Flash Player and Adobe AIR components. The initial description specifies an integer overflow in Flash Player before 10.3.183.48 and 11.x before 11.5.502.135/136 (various OSs), and Adobe AIR before 3.5.0.880/890, enabling arbitrary code execution via unspecified vectors...

CVE-2012-4165

CVE-2012-4165 concerns Adobe Flash Player and Flash runtime components (including AIR) with memory-corruption based remote code execution via unspecified vectors. Affected versions include Flash Player prior to 10.3.183.23 and software in the 11.x line before 11.4.402.265 on Windows/macOS; on Lin...

CVE-2012-5678

CVE-2012-5678 concerns Adobe Flash Player (and related AIR components) with multiple memory-corruption and code-execution vulnerabilities across Windows, Mac, Linux and Android platforms. Affected versions include Flash Player before 10.3.183.48 / 11.x before 11.5.502.135 on Windows, Mac, Linux; ...

CVE-2013-3362

CVE-2013-3362 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected Flash Player versions (before 11.7.700.242, 11.8.x before 11.8.800.168 on Windows/mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, before 11.1.115.81 on Android 4.x) and AIR before ...

CVE-2013-3361

CVE-2013-3361 affects Adobe Flash Player and Adobe AIR with memory corruption vulnerabilities that could allow attackers to execute arbitrary code or cause a denial of service. Affected versions span multiple platforms: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/ma...

CVE-2012-5676

CVE-2012-5676 concerns a buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution. The vulnerability affects multiple platforms: Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 (Windows), before 10.3.183.48 and 11.x before 11.5.502.136 (Mac OS X), bef...

CVE-2013-0638

Adobe Flash Player and Adobe AIR are listed as vulnerable across multiple platforms (Windows, Mac OS X, Linux, Android) with CVE-2013-0638, due to memory corruption allowing arbitrary code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 10.3.1...

CVE-2013-3363

CVE-2013-3363 affects Adobe Flash Player and Adobe AIR prior to specific fixed versions. The description lists vulnerable software: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/Mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, and before 11.1....

CVE-2010-2179

CVE-2010-2179 is a documented XSS in Adobe Flash Player (and related Flash/AIR components) triggered when Firefox/Chrome access certain URLs. Connected advisories (RHSA-2010-0470 and RHSA-2010-0464) describe a flash-plugin security update addressing this and related CVEs, noting an input sanitiza...

CVE-2012-0724

CVE-2012-0724 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome prior to 18.0.1025.151. The vulnerability enables memory corruption leading to a possible denial of service or other unspecified impact via unknown vectors (distinct from CVE-2012-0725). Connected advisories corrobora...

CVE-2013-5329

CVE-2013-5329 is a memory-corruption vulnerability in multiple Flash Player versions (Windows/macOS: prior to 11.9.900.152; Linux: prior to 11.2.202.327) and in related AIR components (AIR before 3.9.0.1210). Exploitation could lead to arbitrary code execution or a crash. The publicly referenced ...

CVE-2013-0637

Adobe Flash Player and AIR contain a vulnerability (CVE-2013-0637) that could allow a remote attacker to obtain sensitive information via unspecified vectors. Affected affected software/versions include Flash Player on Windows (before 10.3.183.63) and Windows 11.x before 11.6.602.168, Mac OS X (b...

CVE-2008-5361

Adobe Flash Player and Adobe AIR are affected by CVE-2008-5361. The vulnerability arises because the ActionScript 2 VM does not verify a member element’s size when performing DefineConstantPool, ActionJump, ActionPush, and ActionTry (and related actions), enabling a remote attacker to read sensit...

CVE-2008-5362

CVE-2008-5362 covers a vulnerability in the DefineConstantPool action of the ActionScript 2 VM in Adobe Flash Player 10.x (before 10.0.12.36) and 9.x (before 9.0.151.0), and Adobe AIR before 1.5. The issue arises when an untrusted input value is accepted for a "constant count," enabling a remote ...

CVE-2013-1367

Technical details about CVE-2013-1367 are not publicly available in the provided connected documents. Monitor for updates from ENISA EUVD entries and other sources.

CVE-2013-0642

Technical details for CVE-2013-0642 are not publicly available in the provided documents; monitor for updates.

CVE-2013-0647

Adobe Flash Player and Adobe AIR are affected by CVE-2013-0647, a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The affected products include Flash Player on Windows, Mac OS X, Linux, Android platforms,...

CVE-2008-5363

Affected software: Adobe Flash Player (10.x before 10.0.12.36; 9.x before 9.0.151.0) and Adobe AIR before 1.5. The issue: ActionScript 2 VM does not validate character elements when retrieved from the dictionary data structure, enabling a remote attacker to trigger a NULL pointer dereference and ...

CVE-2013-0645

Technical details (affected component, vulnerable version, exploit information, and remediation) are not provided in the supplied documents; monitor for updates .

CVE-2013-1370

Technical details for CVE-2013-1370 are not publicly available in the provided documents. The connected EUVD entries mention malware but do not specify affected products, versions, or exploit information. Monitor for updates.

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

CVE-2012-5277

Adobe Flash Player and Adobe AIR contain a buffer overflow vulnerability (CVE-2012-5277) that allows arbitrary code execution via unspecified vectors. Affected: Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/macOS; Flash before 10.3.183.43 and 11.x before 11.2.202.251 on ...

CVE-2013-1365

No connected documents provide concrete technical details for CVE-2013-1365 beyond the initial description. Technical specifics (affected products/versions, root cause, exploitability) are not publicly disclosed here. Monitor for updates and new disclosures.

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...

CVE-2013-1369

Technical details for CVE-2013-1369 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-5275

CVE-2012-5275 is a buffer‑overflow vulnerability in Adobe Flash Player (and related AIR components) that affects multiple platforms (Windows, Mac OS X, Linux, Android 2.x/3.x/4.x) and allows arbitrary code execution via unspecified vectors. The initial description confirms the vulnerability class...

CVE-2013-1368

CVE-2013-1368 describes a buffer overflow in multiple Adobe runtimes (Flash Player and Adobe AIR) that permits arbitrary code execution via unspecified vectors. Affected: Windows, Mac OS X, Linux, Android; specific version ranges include Flash Player before 10.3.183.63 and 11.x before 11.6.602.16...

CVE-2013-1372

Technical details about CVE-2013-1372 are not provided in the supplied documents. Public information available here is limited to the description in the initial entry; no affected products, versions, impact, or fixes are confirmed. Monitor for updates.

CVE-2013-1373

The CVE-2013-1373 entry concerns a buffer overflow in Adobe Flash Player prior to specific 10.3.183.63/11.x builds and in Adobe AIR prior to 3.6.0.597/3.6.0.599, across Windows, macOS, Linux, Android 2.x–4.x, and AIR SDK. The issue allows arbitrary code execution via unspecified vectors and is de...

CVE-2013-3343

Technical details for CVE-2013-3343 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates.

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2013-0649

CVE-2013-0649 describes a use-after-free in Adobe Flash Player (multiple platforms: Windows, macOS, Linux) and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player up to 10.3.183.63 and 11.x before 11.6.602.168 on Windows; 10.3.183.61 and ...

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2012-4164

Adobe Flash Player (and AIR) vulnerability CVE-2012-4164 allows arbitrary code execution or memory corruption via unspecified vectors across Windows, Mac OS X, Linux, and Android; affected versions listed in the initial description (pre-10.3.183.23, pre-11.4.402.265 on Windows/Mac; pre-11.2.202.2...

CVE-2013-1374

CVE-2013-1374 = Use-after-free in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR that permits arbitrary code execution via unspecified vectors; affected versions include Flash Player 10.3.x–11.x before listed builds on various platforms and AIR before 3.6.0.x. Patches were released in A...

CVE-2012-4168

CVE-2012-4168 is a cross-domain information leak in Adobe Flash Player and Adobe AIR (affecting multiple platforms: Windows, Mac OS X, Linux, Android 2.x/3.x/4.x). It arises from handling specially crafted SWF content, enabling a remote attacker to read content from a different domain. Public adv...

CVE-2012-5276

CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...

CVE-2013-0639

Adobe Flash Player (and Adobe AIR) contains an integer overflow vulnerability (CVE-2013-0639) that enables arbitrary code execution. Affected are Flash Player versions before 10.3.183.63 / 11.x before 11.6.602.168 on Windows, before 10.3.183.61 / 11.x before 11.6.602.167 on macOS, before 10.3.183...

CVE-2012-5279

Adobe Flash Player and Adobe AIR are affected by CVE-2012-5279. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.43 and 11.x before 11.5.502.110), Linux (before 10.3.183.43 and 11.x before 11.2.2...

CVE-2012-5280

CVE-2012-5280 is a Flash Player buffer overflow affecting Windows, Mac OS X, Linux, and Android (and Adobe AIR), with remediation noted in openSUSE/SUSE advisories as a fix in Flash Player 11.2.202.251+ (and related updates). The connected sources confirm a set of Flash vulnerabilities addressed ...

CVE-2012-5285

The CVE-2012-5285 entry describes a Buffer Overflow in Adobe Flash Player and Adobe AIR. Affected products include Adobe Flash Player pre-10.3.183.29 and 11.x pre-11.4.402.287 on Windows/macOS; pre-10.3.183.29 and 11.x pre-11.2.202.243 on Linux; pre-11.1.111.19 on Android 2.x/3.x; and pre-11.1.11...

CVE-2012-5673

CVE-2012-5673 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected are: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x; and Adobe AIR before...