CVE-2017-2994

CVE-2017-2994 affects Adobe Flash Player prior to 24.0.0.221, involving a use-after-free in the Primetime SDK event dispatch that could lead to arbitrary code execution . The vulnerability is described as remote in multiple advisories and vendor bulletins, with impact stated as the ability for a ...

CVE-2018-15978

CVE-2018-15978 affects Adobe Flash Player versions 31.0.0.122 and earlier, with an out-of-bounds read that could lead to information disclosure. Public references in the connected documents indicate this vulnerability is addressed by updates (e.g., Flash Player 31.0.0.148 in the Mageia/RHEL advis...

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-3003

CVE-2017-3003 is a use-after-free vulnerability in Adobe Flash Player

CVE-2016-4150

CVE-2016-4150 is an unspecified memory corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, reported in the Flash libraries used by IE/Edge. Connected sources confirm a ShimContentFactory.retrieveOpportunityGenerators() memory-corruption condition leading to potential memory cra...

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2016-0960

CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2016-4226

CVE-2016-4226 is a use-after-free vulnerability in Adobe Flash Player that affects Windows/OS X and Linux builds prior to the patched versions listed in the entry: before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux. The issue allows arbitra...

CVE-2017-3072

Adobe Flash Player vulnerability CVE-2017-3072 is described as an exploitable memory corruption in the BitmapData class in Flash Player 25.0.0.148 and earlier, with successful exploitation potentially leading to arbitrary code execution. The connected advisories corroborate multiple related CVEs ...

CVE-2017-3085

Adobe Flash Player vulnerability CVE-2017-3085 is an information-disclosure bypass triggered by URL redirects in Flash versions up to 26.0.0.137 (and fixed in 26.0.0.151). Public advisories and vendor pages reference the affected range and confirm an upgrade path to 26.0.0.151 as the remediation....

CVE-2018-5007

CVE-2018-5007 is a Type Confusion vulnerability in Adobe Flash Player up to version 30.0.0.113 (and earlier). Exploitation could allow arbitrary code execution in the context of the current user, with network access as the attack vector and no user interaction required (per CVSSv3: HIGH, CVSSv2: ...

CVE-2016-4149

CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...

CVE-2016-4175

Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.

CVE-2016-6986

CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...

CVE-2017-3002

CVE-2017-3002 is an Adobe Flash Player vulnerability describing a use-after-free in the ActionScript2 TextField object. Affected: Flash Player 24.0.0.221 and earlier. Impact and exploitation: could allow arbitrary code execution on a remote host. Public advisories note multiple patches; upgrades ...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...

CVE-2015-8655

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2015-8655 are not provided in the supplied documents; no exploit specifics or patch information are present. Monitor for updates.

CVE-2016-4152

CVE-2016-4152 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier used in Flash libraries for Internet Explorer 10/11 and Edge. Connected sources (HackerOne) map this to a ShimContentResolver.configure memory corruption issue in Flash Player, with patches issued by variou...

CVE-2016-4248

Technical details about CVE-2016-4248 are not publicly available in the provided documents. The connected EUVD entries describe malware-related items, but do not include product, impact, vectors, or remediation specifics for this CVE. Monitor for updates.

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2016-4284

Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

CVE-2017-3000

CVE-2017-3000 affects Adobe Flash Player

CVE-2018-4945

Adobe Flash Player CVE-2018-4945 is a Type Confusion vulnerability affecting Flash Player up to version 29.0.0.171. The vulnerability could allow arbitrary code execution in the context of the current user when a crafted Flash file is processed. Public advisories and vendor patches confirm that u...

CVE-2015-8652

Technical details for CVE-2015-8652 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2016-0961

Technical details for CVE-2016-0961 are not publicly available in the provided documents. Monitor for updates and further disclosures.

CVE-2016-0980

Technical details about CVE-2016-0980 are not publicly provided in the supplied documents; the EUVD entries mention malware but do not describe affected software, root cause, or fixes. Monitor for updates.

CVE-2016-4230

CVE-2016-4230 describes a use-after-free in Adobe Flash Player affecting Windows, OS X, and Linux across multiple version ranges (before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X; before 11.2.202.632 on Linux). The vulnerability allows arbitrary code execution via unspecified vec...

CVE-2016-6992

Adobe Flash Player vulnerability CVE-2016-6992 is a type confusion flaw that could allow remote code execution. Affected products include Flash Player on Windows, macOS (before 18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). Connected advisories indicate fixes were re...

CVE-2017-2982

CVE-2017-2982: Adobe Flash Player contains a use-after-free vulnerability in a shutdown routine affecting version 24.0.0.194 and earlier; exploitation could lead to arbitrary code execution. Remediation is to upgrade to 24.0.0.221 (and related patched builds) as indicated by multiple advisories (...

CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

CVE-2017-3106

Adobe Flash Player

CVE-2016-0970

The CVE-2016-0970 entry concerns multiple Adobe products: Flash Player prior to 18.0.0.329 (and 19.x prior to 20.0.0.306 on Windows/OS X; prior to 11.2.202.569 on Linux) and Adobe AIR prior to 20.0.0.260 (including AIR SDK before 20.0.0.260 and AIR SDK & Compiler before 20.0.0.260). It describes ...

CVE-2016-1006

Adobe Flash Player vulnerability CVE-2016-1006 allows bypass of ASLR via JIT data. Affected products and versions (from the provided sources) include Windows and OS X Flash Player versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213, and Linux Flash Player before 11.2.202.616. The roo...

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4222

CVE-2016-4222 is a use-after-free vulnerability in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected: Windows and macOS Flash Player versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Impact: potential remote code executi...

CVE-2016-4279

Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.

CVE-2016-7867

CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2016-0964

Technical details about CVE-2016-0964 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-4153

CVE-2016-4153 is a memory‑corruption vulnerability in Adobe Flash Player’s ShimOpportunityGenerator.configure() that can cause a memory crash and, as described by a trusted report, could enable arbitrary code execution. The vulnerability is associated with Flash Player builds up to 21.0.0.242 and...

CVE-2016-4285

Technical details for CVE-2016-4285 (affected software, components, exploit vectors, impact) are not publicly provided in the connected documents; monitor official advisories for updates.

CVE-2016-6985

Adobe Flash Player CVE-2016-6985 is a memory corruption vulnerability affecting Windows/OS X and Linux builds (before 18.0.0.382; 19.x up to 23.x before 23.0.0.185 on Windows/macOS; before 11.2.202.637 on Linux) triggered by parsing of SWF content as described by the PSP and related advisories. T...

CVE-2016-7870

CVE-2016-7870 affects Adobe Flash Player versions 23.0.0.207 and earlier (Windows, Linux, etc.) with a buffer overflow/underflow in the RegExp class used for specific search strategies. Successful exploitation could lead to arbitrary code execution. Mitigation: upgrade to Flash Player 24.0.0.186 ...

CVE-2017-2984

CVE-2017-2984 is a heap-based buffer overflow vulnerability in Adobe Flash Player’s h264 decoder present in version 24.0.0.194 and earlier. Exploitation could lead to arbitrary code execution. Public advisories indicate remediation by upgrading to Flash Player 24.0.0.221 or newer (e.g., Arch Linu...

CVE-2017-2985

CVE-2017-2985 is a use-after-free vulnerability in Adobe Flash Player’s ActionScript 3 BitmapData class affecting Flash Player versions earlier than 24.0.0.221. The underlying issue allows remote code execution, with public exploit activity noted (e.g., Exploit-DB reference). Remediation: update ...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...