CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-4237

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4245

Technical details for CVE-2016-4245 are not present in the provided documents. The connected EUVD entries mention malware 'sbrugna' but do not specify affected products, versions, or root cause for this CVE. Monitor for updates.

CVE-2016-6924

Technical details for CVE-2016-6924 are not publicly available in the provided documents beyond listing the vulnerability and related CVEs; monitor for updates.

CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2016-7873

CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...

CVE-2016-1016

CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...

CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4184

Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.

CVE-2016-4228

CVE-2016-4228 describes a use-after-free in Adobe Flash Player prior to 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux, allowing arbitrary code execution via unspecified vectors. Connected sources indicate exploitation activity: exploit-db entr...

CVE-2016-4286

CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2018-4935

Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2016-0987

Technical details for CVE-2016-0987 are not provided in the connected documents. Monitor for updates.

CVE-2016-0992

CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...

CVE-2016-1017

Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.

CVE-2016-1024

Technical details for CVE-2016-1024 are not provided in the connected documents. The initial CVE description lists a Flash vulnerability with unspecified vectors; no product/version/root cause/fix details are supplied here. Monitor for updates.

CVE-2016-4122

CVE-2016-4122 concerns Adobe Flash Player/Flash plugin. Connected advisories cite multiple vendors (openSUSE/SUSE, Red Hat, ALT Linux, arch linux) reporting this CVE along with related ones (4123–4129, 4130–4132, 4133–4137, 4138–4148, 4150–4171). The vulnerability set includes memory corruption, ...

CVE-2016-4190

Technical details for CVE-2016-4190 are not publicly available in the provided documents. The connected EUVD entries do not specify affected products, root cause, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2016-4235

Technical details about CVE-2016-4235 are not provided in the submitted documents; no affected products, root cause, or remediation are listed. Monitor for updates from official advisories.

CVE-2016-4241

Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...

CVE-2016-4243

Technical details (affected product, component, version, root cause, impact) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-4281

Technical details about CVE-2016-4281 are not provided in the supplied documents. Connected EUVD records mention malware “sbrugna” without vulnerability specifics. Monitor for updates from ENISA advisories and related sources.

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2016-7881

CVE-2016-7881 affects Adobe Flash Player up to version 23.0.0.207 (and the Linux 11.2.202.644 line) and results in an exploitable use-after-free in the MovieClip class when converting to an object, with the impact of arbitrary code execution. Several connected advisories cite this issue among a b...

CVE-2016-0977

Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-0989

Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...

CVE-2016-1002

Adobe Flash Player and Adobe AIR components are affected by a memory‑corruption vulnerability (CVE-2016-1002) that can lead to arbitrary code execution or a denial of service. The issue is described across multiple CNVD entries as a memory‑corruption vulnerability in Flash Player that could be ex...

CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-1032

Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2016-4127

CVE-2016-4127 is part of a set of Flash Player vulnerabilities documented across multiple advisories (e.g., APSB16-18) affecting Adobe Flash Player used in Internet Explorer 10/11 and Edge. Connected sources indicate this family includes CVEs such as 2016-4122, 4123, 4124, 4125, 4127, 4128, 4129,...

CVE-2016-4219

CVE-2016-4219 affects Adobe Flash Player before 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS and before 11.2.202.632 on Linux. It allows executing arbitrary code or causing memory corruption via unspecified vectors, distinct from related CVEs listed in the entry. The provided...

CVE-2016-4220

Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm scope and remediation.

CVE-2016-4287

Adobe Flash Player CVE-2016-4287 is an integer overflow vulnerability that allows remote code execution. Affected platforms include Windows and macOS builds prior to 18.0.0.375 and 19.x through 23.x prior to 23.0.0.162, as well as Linux builds prior to 11.2.202.635. The issue is reported alongsid...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2015-8820

CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...

CVE-2016-0976

Technical details for CVE-2016-0976 are not publicly available in the provided documents. Monitor for updates; no product, version, vector, or impact specifics are included in the connected data.

CVE-2016-0978

CVE-2016-0978 covers multiple Adobe Flash Player versions (Windows, macOS, Linux) before 20.0.0.306 for Flash Player and before 20.0.0.260 for AIR/SDK/SDK & Compiler. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is separate from CVE-2016-0964/...

CVE-2016-0985

CVE-2016-0985 is a type-confusion vulnerability in Adobe Flash Player and related AIR components that enables remote code execution. Affected products include Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/OS X, and before 11.2.202.569 on Linux; and AIR before 20.0.0.260...

CVE-2016-4131

CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...

CVE-2016-4139

CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...

CVE-2016-4166

CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...

CVE-2016-4186

Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux, is affected by CVE-2016-4186 via unspecified vectors, potentially enabling arbitrary code execution or memory corruption. Connected sources do not specify the exact exp...

CVE-2016-4218

Technical details for CVE-2016-4218 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-4920

Adobe Flash Player

CVE-2015-8658

Technical details for CVE-2015-8658 are not provided in the supplied documents; public specifics (affected software, impact, fixes) are not available here. Monitor for updates.

CVE-2016-0971

CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...

CVE-2016-1033

Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.