CVE-2017-3100

Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...

CVE-2015-8654

Technical details about CVE-2015-8654 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates from official advisories.

CVE-2016-0996

Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-0999

CVE-2016-0999 is a use-after-free in Adobe Flash Player (Windows/OS X: before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR before 21.0.0.176, enabling arbitrary code execution via unspecified vectors. A remote code execution bug tied to a crafted SWF...

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4136

CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...

CVE-2016-4225

CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...

CVE-2016-6921

Adobe Flash Player contains a use-after-free vulnerability rated HIGH, affecting Windows/OS X builds before 18.0.0.375 and 19.x–23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows arbitrary code execution via unspecified vectors and is a separate vulnerability from CVE-2016-42...

CVE-2016-6932

Technical details about CVE-2016-6932 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-2996

CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...

CVE-2018-5008

CVE-2018-5008 is an Adobe Flash Player out-of-bounds read vulnerability reported in Flash Player 30.0.0.113 and earlier. Connected sources confirm it enables information disclosure and is part of APSB18-24 alongside CVE-2018-5007 (arbitrary code execution). Public details specify affected compone...

CVE-2015-8657

Technical details for CVE-2015-8657 are not publicly available in the provided connected documents; no specific affected products, root cause, or remediation are disclosed here; monitor for updates.

CVE-2016-0986

Technical details for CVE-2016-0986 are not publicly available in the provided connected documents; no concrete affected products, vulnerable components, or remediation specifics are present. Monitor for updates.

CVE-2016-0991

A use-after-free vulnerability in Adobe Flash Player (before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR components enables arbitrary code execution via unspecified vectors. The entry CVE-2016-0991 also notes these are distin...

CVE-2016-1001

Adobe Flash Player and AIR (including AIR SDK variants) are affected by a heap-based buffer overflow (CVE-2016-1001) that could allow arbitrary code execution. Affected are Flash Player prior to 18.0.0.333 and 19.x–21.x prior to 21.0.0.182 on Windows/OS X, and prior to 11.2.202.577 on Linux; AIR ...

CVE-2016-1011

CVE-2016-1011 is a use-after-free vulnerability in Adobe Flash Player affecting the LoadVars.decode path. Affected are Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/macOS, and before 11.2.202.616 on Linux. Successful exploitation could allow arbitrary code exec...

CVE-2016-1027

Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.

CVE-2016-4140

CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...

CVE-2016-4143

CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.

CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...

CVE-2016-4245

Technical details for CVE-2016-4245 are not present in the provided documents. The connected EUVD entries mention malware 'sbrugna' but do not specify affected products, versions, or root cause for this CVE. Monitor for updates.

CVE-2016-6981

CVE-2016-6981 is a use-after-free vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux prior to the stated fixed versions. The vulnerability could allow arbitrary code execution via unspecified vectors and is described as a remote code execution issue. Public notes in connected ...

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2016-0965

Adobe Flash Player and Adobe AIR vulnerabilities (CVE-2016-0965) allow attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Affected: Adobe Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x/20.x prior to 20.0.0.306; Linux before 11.2.202.569. Affected A...

CVE-2016-0994

The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...

CVE-2016-1013

CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...

CVE-2016-1014

CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-7877

CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...

CVE-2016-0967

Technical details are not publicly available in the provided documents for CVE-2016-0967; connected EUVD entries only note malware in sbrugna without linking to specific root cause, affected products, or fixes. Monitor for updates.

CVE-2016-1017

Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.

CVE-2016-4122

CVE-2016-4122 concerns Adobe Flash Player/Flash plugin. Connected advisories cite multiple vendors (openSUSE/SUSE, Red Hat, ALT Linux, arch linux) reporting this CVE along with related ones (4123–4129, 4130–4132, 4133–4137, 4138–4148, 4150–4171). The vulnerability set includes memory corruption, ...

CVE-2016-4188

Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.

CVE-2016-4223

Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...

CVE-2016-7880

CVE-2016-7880 affects Adobe Flash Player up to version 23.0.0.207 / 11.2.202.644, where an exploitable use-after-free occurs when setting the length property of an array, potentially enabling arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 (and...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2016-0989

Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...

CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-4127

CVE-2016-4127 is part of a set of Flash Player vulnerabilities documented across multiple advisories (e.g., APSB16-18) affecting Adobe Flash Player used in Internet Explorer 10/11 and Edge. Connected sources indicate this family includes CVEs such as 2016-4122, 4123, 4124, 4125, 4127, 4128, 4129,...

CVE-2016-4277

Adobe Flash Player vulnerable versions before 18.0.0.375 and 19.x up to 23.x before 23.0.0.162 on Windows/macOS, and before 11.2.202.635 on Linux, allow bypassing access restrictions to obtain sensitive information via unspecified vectors. Root cause not explicitly detailed in the provided docume...

CVE-2016-4282

Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6983

Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.

CVE-2016-6990

Technical details for CVE-2016-6990 are not provided in the connected documents. The available sources discuss malware activity generally and do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2016-7890

CVE-2016-7890 affects Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier, describing a security bypass in the implementation of the same-origin policy. Connected advisories show this CVE being addressed in various Linux package updates: e.g., openSUSE openSUSE-2016-1...

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2016-0981

Technical details for CVE-2016-0981 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2016-0997

CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...