294 matches found
CVE-2016-4121
Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...
CVE-2016-4134
CVE-2016-4134 is an Adobe Flash Player vulnerability that was addressed as part of the APSB16-18 bulletin. Several connected advisories indicate the fix was delivered by upgrading Flash Player to 11.2.202.626 (e.g., SUSE/openSUSE updates, ALT Linux packages, and Red Hat advisories). The provided ...
CVE-2016-4142
CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...
CVE-2016-4145
CVE-2016-4145 is tied to Adobe Flash Player used in Internet Explorer 10/11 and Edge. The connected sources show this CVE as part of a broader set of Flash vulnerabilities (CVE-2016-4122 through CVE-2016-4148) patched by Adobe in APSB16-18, with open-source advisories from SUSE/OpenSUSE and Red H...
CVE-2016-4148
CVE-2016-4148 is part of a family of Flash Player vulnerabilities fixed in 2016 across multiple advisories. Connected records confirm multiple CVEs (including 4148) with a range of memory corruption issues (use-after-free, heap overflows, type confusion, information disclosure) that could lead to...
CVE-2016-4174
No concrete technical details about CVE-2016-4174 are provided in the connected documents. The EUVD entries refer to malware in sbrugna but do not specify affected product/version/root cause for this CVE. Monitor for updates.
CVE-2016-4188
Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.
CVE-2016-4223
Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...
CVE-2016-6990
Technical details for CVE-2016-6990 are not provided in the connected documents. The available sources discuss malware activity generally and do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2016-7890
CVE-2016-7890 affects Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier, describing a security bypass in the implementation of the same-origin policy. Connected advisories show this CVE being addressed in various Linux package updates: e.g., openSUSE openSUSE-2016-1...
CVE-2015-8654
Technical details about CVE-2015-8654 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates from official advisories.
CVE-2016-4136
CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...
CVE-2016-4185
Technical details for CVE-2016-4185 are not publicly provided in the supplied documents. Monitor for updates as connected EUVD entries reference malware but do not reveal product/version/impact specifics here.
CVE-2016-4278
Technical details for CVE-2016-4278 are not publicly available in the provided documents. Monitor for updates from official advisories and affected vendors.
CVE-2016-6984
CVE-2016-6984 refers to memory corruption in Adobe Flash Player affecting multiple versions prior to 18.0.0.382 and 19.x up to 23.x before 23.0.0.185 on Windows/macOS, and Linux before 11.2.202.637. The vulnerability could allow arbitrary code execution or a denial of service via unspecified vect...
CVE-2016-7880
CVE-2016-7880 affects Adobe Flash Player up to version 23.0.0.207 / 11.2.202.644, where an exploitable use-after-free occurs when setting the length property of an array, potentially enabling arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 (and...
CVE-2017-3100
Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...
CVE-2018-5000
CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...
CVE-2016-0967
Technical details are not publicly available in the provided documents for CVE-2016-0967; connected EUVD entries only note malware in sbrugna without linking to specific root cause, affected products, or fixes. Monitor for updates.
CVE-2016-0981
Technical details for CVE-2016-0981 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2016-0986
Technical details for CVE-2016-0986 are not publicly available in the provided connected documents; no concrete affected products, vulnerable components, or remediation specifics are present. Monitor for updates.
CVE-2016-0999
CVE-2016-0999 is a use-after-free in Adobe Flash Player (Windows/OS X: before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR before 21.0.0.176, enabling arbitrary code execution via unspecified vectors. A remote code execution bug tied to a crafted SWF...
CVE-2016-1013
CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...
CVE-2016-4124
The CVE-2016-4124 entry refers to multiple vulnerabilities in Adobe Flash Player (11.x era) affecting the Flash runtime used by browsers (e.g., in Internet Explorer and Edge) with various CVEs listed in the 2016-4122…4171 range. Connected advisories show remediation via updates to Flash Player 11...
CVE-2016-4132
CVE-2016-4132 corresponds to an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries in IE10/IE11 and Edge, with unknown impact in the initial entry but later connected advisories list multiple memory corruption/code-execution related CVEs. Connected...
CVE-2016-4140
CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...
CVE-2016-4144
CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...
CVE-2016-4224
CVE-2016-4224 affects Adobe Flash Player prior to 18.0.0.366 (Windows/OS X) and earlier 22.x versions before 22.0.0.209, and Linux before 11.2.202.632. Connected advisories describe a memory corruption issue in Flash Player when parsing a specially crafted SWF file, exploitable remotely by entici...
CVE-2016-4225
CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...
CVE-2016-4276
Technical details for CVE-2016-4276 are not publicly available in the provided documents. Monitor for updates when connected sources (if any) publish specifics about affected products, vectors, impact, or remediation.
CVE-2016-4277
Adobe Flash Player vulnerable versions before 18.0.0.375 and 19.x up to 23.x before 23.0.0.162 on Windows/macOS, and before 11.2.202.635 on Linux, allow bypassing access restrictions to obtain sensitive information via unspecified vectors. Root cause not explicitly detailed in the provided docume...
CVE-2016-6925
Technical details for CVE-2016-6925 are not publicly provided in the connected documents. Monitor for updates.
CVE-2016-7871
CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...
CVE-2016-7877
CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...
CVE-2018-4919
CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...
CVE-2016-0994
The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...
CVE-2016-0997
CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...
CVE-2016-1001
Adobe Flash Player and AIR (including AIR SDK variants) are affected by a heap-based buffer overflow (CVE-2016-1001) that could allow arbitrary code execution. Affected are Flash Player prior to 18.0.0.333 and 19.x–21.x prior to 21.0.0.182 on Windows/OS X, and prior to 11.2.202.577 on Linux; AIR ...
CVE-2016-1014
CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...
CVE-2016-4129
CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...
CVE-2016-4130
CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...
CVE-2016-4143
CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...
CVE-2017-2995
CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...
CVE-2018-4937
CVE-2018-4937 affects Adobe Flash Player prior to 29.0.0.140 (APSB18-08). The issue is an exploitable out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Affected versions include 29.0.0.113 and earlier; remediation is upgrading to 29.0.0.140 or new...
CVE-2015-8821
Technical details about CVE-2015-8821 are not publicly available in the provided connected documents. Monitor for official updates from vendors and security advisories.
CVE-2016-1016
CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...
CVE-2016-1018
CVE-2016-1018 is a stack-based buffer overflow in Adobe Flash Player that can allow arbitrary code execution when processing crafted JPEG-XR data. Affected are Flash Player on Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The underly...
CVE-2016-4128
CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...
CVE-2016-4147
CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...