294 matches found
CVE-2016-7872
CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...
CVE-2016-7877
CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...
CVE-2017-2995
CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...
CVE-2016-0981
Technical details for CVE-2016-0981 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2016-0989
Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...
CVE-2016-0997
CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...
CVE-2016-1018
CVE-2016-1018 is a stack-based buffer overflow in Adobe Flash Player that can allow arbitrary code execution when processing crafted JPEG-XR data. Affected are Flash Player on Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The underly...
CVE-2016-1032
Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2016-4128
CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...
CVE-2016-4162
Technical details for CVE-2016-4162 are not publicly available in the provided Connected documents. Monitor for updates.
CVE-2016-4225
CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...
CVE-2016-4287
Adobe Flash Player CVE-2016-4287 is an integer overflow vulnerability that allows remote code execution. Affected platforms include Windows and macOS builds prior to 18.0.0.375 and 19.x through 23.x prior to 23.0.0.162, as well as Linux builds prior to 11.2.202.635. The issue is reported alongsid...
CVE-2016-7873
CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...
CVE-2016-7874
CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...
CVE-2015-8656
Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.
CVE-2016-1017
Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.
CVE-2016-1028
Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.
CVE-2016-4120
Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.
CVE-2016-4127
CVE-2016-4127 is part of a set of Flash Player vulnerabilities documented across multiple advisories (e.g., APSB16-18) affecting Adobe Flash Player used in Internet Explorer 10/11 and Edge. Connected sources indicate this family includes CVEs such as 2016-4122, 4123, 4124, 4125, 4127, 4128, 4129,...
CVE-2016-4147
CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...
CVE-2016-4227
Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.
CVE-2016-7875
CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...
CVE-2016-0971
CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...
CVE-2016-0985
CVE-2016-0985 is a type-confusion vulnerability in Adobe Flash Player and related AIR components that enables remote code execution. Affected products include Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/OS X, and before 11.2.202.569 on Linux; and AIR before 20.0.0.260...
CVE-2016-1016
CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...
CVE-2016-4181
CVE-2016-4181 affects Adobe Flash Player prior to 18.0.0.366 and older 19.x–22.x before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors; the catastrophe is described as a distinct issue ...
CVE-2016-4231
CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...
CVE-2016-4286
CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...
CVE-2016-0976
Technical details for CVE-2016-0976 are not publicly available in the provided documents. Monitor for updates; no product, version, vector, or impact specifics are included in the connected data.
CVE-2016-0977
Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2016-0978
CVE-2016-0978 covers multiple Adobe Flash Player versions (Windows, macOS, Linux) before 20.0.0.306 for Flash Player and before 20.0.0.260 for AIR/SDK/SDK & Compiler. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is separate from CVE-2016-0964/...
CVE-2016-0987
Technical details for CVE-2016-0987 are not provided in the connected documents. Monitor for updates.
CVE-2016-0992
CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...
CVE-2016-4220
Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm scope and remediation.
CVE-2016-4228
CVE-2016-4228 describes a use-after-free in Adobe Flash Player prior to 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux, allowing arbitrary code execution via unspecified vectors. Connected sources indicate exploitation activity: exploit-db entr...
CVE-2016-4241
Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...
CVE-2016-7868
Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...
CVE-2016-7869
CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,
CVE-2016-7881
CVE-2016-7881 affects Adobe Flash Player up to version 23.0.0.207 (and the Linux 11.2.202.644 line) and results in an exploitable use-after-free in the MovieClip class when converting to an object, with the impact of arbitrary code execution. Several connected advisories cite this issue among a b...
CVE-2016-1002
Adobe Flash Player and Adobe AIR components are affected by a memory‑corruption vulnerability (CVE-2016-1002) that can lead to arbitrary code execution or a denial of service. The issue is described across multiple CNVD entries as a memory‑corruption vulnerability in Flash Player that could be ex...
CVE-2016-1025
Technical details for CVE-2016-1025 are not publicly provided in the supplied documents; monitor for updates.
CVE-2016-1029
Technical details for CVE-2016-1029 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates in the connected EUVD entries and the NVD entry for new details.
CVE-2016-4131
CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...
CVE-2016-4139
CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...
CVE-2016-4155
CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...
CVE-2016-4184
Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.
CVE-2016-4190
Technical details for CVE-2016-4190 are not publicly available in the provided documents. The connected EUVD entries do not specify affected products, root cause, or remediation for this CVE. Monitor for updates from official advisories.
CVE-2016-4219
CVE-2016-4219 affects Adobe Flash Player before 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS and before 11.2.202.632 on Linux. It allows executing arbitrary code or causing memory corruption via unspecified vectors, distinct from related CVEs listed in the entry. The provided...