CVE-2016-4153

CVE-2016-4153 is a memory‑corruption vulnerability in Adobe Flash Player’s ShimOpportunityGenerator.configure() that can cause a memory crash and, as described by a trusted report, could enable arbitrary code execution. The vulnerability is associated with Flash Player builds up to 21.0.0.242 and...

CVE-2016-7879

CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4222

CVE-2016-4222 is a use-after-free vulnerability in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected: Windows and macOS Flash Player versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Impact: potential remote code executi...

CVE-2016-4271

Adobe Flash Player (Windows/macOS: prior to 18.0.0.375 and 19.x up to 23.x before 23.0.0.162; Linux: before 11.2.202.635) is associated with CVE-2016-4271, described as bypassing intended access restrictions and enabling information disclosure via unspecified vectors. Connected advisories show pa...

CVE-2016-4285

Technical details for CVE-2016-4285 (affected software, components, exploit vectors, impact) are not publicly provided in the connected documents; monitor official advisories for updates.

CVE-2016-6927

Technical details for CVE-2016-6927 are not publicly available in the provided documents. Connected EUVD entries mention malware but do not describe the vulnerability. Monitor for updates.

CVE-2016-6985

Adobe Flash Player CVE-2016-6985 is a memory corruption vulnerability affecting Windows/OS X and Linux builds (before 18.0.0.382; 19.x up to 23.x before 23.0.0.185 on Windows/macOS; before 11.2.202.637 on Linux) triggered by parsing of SWF content as described by the PSP and related advisories. T...

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

CVE-2017-2984

CVE-2017-2984 is a heap-based buffer overflow vulnerability in Adobe Flash Player’s h264 decoder present in version 24.0.0.194 and earlier. Exploitation could lead to arbitrary code execution. Public advisories indicate remediation by upgrading to Flash Player 24.0.0.221 or newer (e.g., Arch Linu...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...

CVE-2016-4141

CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...

CVE-2016-4156

CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...

CVE-2016-4283

Technical details for CVE-2016-4283 are not publicly provided in the provided documents. Monitor for updates.

CVE-2016-6929

Technical details about CVE-2016-6929 are not provided in the connected documents. The EUVD entries mention malware but do not specify affected products, impact, or remediation. Monitor for updates.

CVE-2016-6992

Adobe Flash Player vulnerability CVE-2016-6992 is a type confusion flaw that could allow remote code execution. Affected products include Flash Player on Windows, macOS (before 18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). Connected advisories indicate fixes were re...

CVE-2016-7870

CVE-2016-7870 affects Adobe Flash Player versions 23.0.0.207 and earlier (Windows, Linux, etc.) with a buffer overflow/underflow in the RegExp class used for specific search strategies. Successful exploitation could lead to arbitrary code execution. Mitigation: upgrade to Flash Player 24.0.0.186 ...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2993

CVE-2017-2993 affects Adobe Flash Player up to version 24.0.0.194 and earlier. The issue is a use-after-free in event handler handling, potentially allowing arbitrary code execution. Exploitation can occur remotely via a crafted SWF file; impact is code execution with high severity. The standard ...

CVE-2017-2998

CVE-2017-2998 is a memory corruption vulnerability in Adobe Flash Player ≤ 24.0.0.221, specifically in the Primetime TVSDK API functionality related to timeline interactions that could enable arbitrary code execution. Public postings in multiple advisories confirm a remote, user-triggered risk wi...

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2016-0990

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0995

Technical details for CVE-2016-0995 are not publicly provided in the supplied documents; no affected products, vectors, or remediation are specified here. Monitor for updates.

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...

CVE-2016-6931

Technical details for CVE-2016-6931 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-2988

CVE-2017-2988 is a memory corruption vulnerability in Adobe Flash Player (vulnerable up to 24.0.0.194) triggered during garbage collection, potentially enabling arbitrary code execution. Root cause: memory corruption during GC with vectors that can be exploited remotely; attack vector is NETWORK ...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2016-0988

Technical details for CVE-2016-0988 are not publicly provided in the connected documents above; no concrete affected versions, vulnerable components, or remediation are present. Monitor for updates.

CVE-2016-1000

Technical details about CVE-2016-1000 are not publicly provided in the supplied documents; no vendor, affected products, or remediation details are present. Monitor for updates.

CVE-2016-1005

CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...

CVE-2016-4146

CVE-2016-4146 is a Flash Player vulnerability affecting Adobe Flash Player in the browser plugins used by IE/Edge, with a focus on memory corruption/use-after-free conditions that could lead to arbitrary code execution. Public advisories (e.g., Mageia and ALT Linux) group it with other CVEs (4122...

CVE-2016-4173

Technical details about CVE-2016-4173 are not provided in the supplied documents. No affected products, versions, or fixes are specified here. Monitor official disclosures for updates.

CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...

CVE-2016-6922

Technical details for CVE-2016-6922 are not publicly available in the provided connected documents. Monitor the EUVD entries and other sources for updates; no specific affected products, impact, or remediation are provided here.

CVE-2016-6989

Technical details for CVE-2016-6989 are not publicly provided in the supplied documents; no validated affected products, vulnerable components, or remediation are described here. Monitor for updates in connected sources for concrete information.

CVE-2016-4121

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...

CVE-2016-4151

CVE-2016-4151 is described as an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, affecting the Flash library components used by Internet Explorer 10/11 and Microsoft Edge. The connected documents attribute the issue to ShimContentFactory.retrieveResolvers...

CVE-2016-4176

Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...

CVE-2016-4237

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6981

CVE-2016-6981 is a use-after-free vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux prior to the stated fixed versions. The vulnerability could allow arbitrary code execution via unspecified vectors and is described as a remote code execution issue. Public notes in connected ...

CVE-2016-6987

CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....

CVE-2018-5008

CVE-2018-5008 is an Adobe Flash Player out-of-bounds read vulnerability reported in Flash Player 30.0.0.113 and earlier. Connected sources confirm it enables information disclosure and is part of APSB18-24 alongside CVE-2018-5007 (arbitrary code execution). Public details specify affected compone...

CVE-2016-0965

Adobe Flash Player and Adobe AIR vulnerabilities (CVE-2016-0965) allow attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Affected: Adobe Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x/20.x prior to 20.0.0.306; Linux before 11.2.202.569. Affected A...

CVE-2016-4132

CVE-2016-4132 corresponds to an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries in IE10/IE11 and Edge, with unknown impact in the initial entry but later connected advisories list multiple memory corruption/code-execution related CVEs. Connected...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4148

CVE-2016-4148 is part of a family of Flash Player vulnerabilities fixed in 2016 across multiple advisories. Connected records confirm multiple CVEs (including 4148) with a range of memory corruption issues (use-after-free, heap overflows, type confusion, information disclosure) that could lead to...

CVE-2016-4275

Technical details for CVE-2016-4275 are not publicly provided in the supplied documents. Monitor official advisories for updates; EUVD entries reference malware but do not describe exploit vectors or affected products.

CVE-2016-6921

Adobe Flash Player contains a use-after-free vulnerability rated HIGH, affecting Windows/OS X builds before 18.0.0.375 and 19.x–23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows arbitrary code execution via unspecified vectors and is a separate vulnerability from CVE-2016-42...

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2017-2996

CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...