1084 matches found
CVE-2014-5333
Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...
CVE-2014-0584
CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...
CVE-2015-0334
CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...
CVE-2015-3093
CVE-2015-3093 is a memory‑corruption vulnerability in Adobe Flash Player (and related AIR components) triggered by parsing SWF content. Affects Windows/macOS/Linux; vulnerable versions include Flash Player before 13.0.0.289 and 14.x–17.x before 17.0.0.188 on Windows/macOS and before 11.2.202.460 ...
CVE-2016-1000
Technical details about CVE-2016-1000 are not publicly provided in the supplied documents; no vendor, affected products, or remediation details are present. Monitor for updates.
CVE-2016-1005
CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...
CVE-2016-1099
CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...
CVE-2016-1108
CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...
CVE-2016-4121
Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...
CVE-2016-4123
CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...
CVE-2016-4142
CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...
CVE-2016-4151
CVE-2016-4151 is described as an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, affecting the Flash library components used by Internet Explorer 10/11 and Microsoft Edge. The connected documents attribute the issue to ShimContentFactory.retrieveResolvers...
CVE-2016-4176
Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...
CVE-2016-4283
Technical details for CVE-2016-4283 are not publicly provided in the provided documents. Monitor for updates.
CVE-2016-6929
Technical details about CVE-2016-6929 are not provided in the connected documents. The EUVD entries mention malware but do not specify affected products, impact, or remediation. Monitor for updates.
CVE-2016-6985
Adobe Flash Player CVE-2016-6985 is a memory corruption vulnerability affecting Windows/OS X and Linux builds (before 18.0.0.382; 19.x up to 23.x before 23.0.0.185 on Windows/macOS; before 11.2.202.637 on Linux) triggered by parsing of SWF content as described by the PSP and related advisories. T...
CVE-2016-6987
CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....
CVE-2017-2998
CVE-2017-2998 is a memory corruption vulnerability in Adobe Flash Player ≤ 24.0.0.221, specifically in the Primetime TVSDK API functionality related to timeline interactions that could enable arbitrary code execution. Public postings in multiple advisories confirm a remote, user-triggered risk wi...
CVE-2017-2999
Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...
CVE-2010-2180
Technical details for CVE-2010-2180 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2010-3647
Technical details for CVE-2010-3647 are not publicly available in the provided connected documents. The initial description lists general vulnerabilities in Adobe Flash Player but does not specify affected versions, components, root cause, impact, or fixes.
CVE-2011-2139
CVE-2011-2139 affects Adobe Flash Player prior to 10.3.183.5 (Windows/macOS/Linux/Solaris) and 10.3.186.3 on Android, plus Adobe AIR prior to 2.7.1 (Windows/Mac) and 2.7.1.1961 (Android). It enables remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified...
CVE-2011-2426
CVE-2011-2426 is a stack-based overflow in Adobe Flash Player’s ActionScript Virtual Machine (AVM) exploited via remote vectors. The vulnerability affects Flash Player prior to the patched versions cited in Red Hat/SUSE advisories and related Nessus/OpenVAS entries, which describe AVM stack overf...
CVE-2011-2453
Adobe Flash Player and Adobe AIR are affected by CVE-2011-2453. The initial description lists that Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, macOS, Linux, and Solaris, and before 11.1.102.59 on Android, as well as AIR before 3.1.0.4880, are vulnerable via unspecified...
CVE-2013-1375
CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...
CVE-2014-0507
Adobe Flash Player and Adobe AIR are affected by CVE-2014-0507 due to a buffer overflow that could allow arbitrary code execution. Affected components include Flash Player on Windows/macOS (before 11.7.700.275, and 11.8.x up to 13.0.x before 13.0.0.182; Linux before 11.2.202.350) and Adobe AIR be...
CVE-2014-0509
CVE-2014-0509 describes a cross-site scripting (XSS) vulnerability in Adobe Flash Player and Adobe AIR products prior to the listed versions. Affected: Flash Player on Windows/macOS (before 11.7.700.275 and 11.8.x–13.0.x before 13.0.0.182), Flash Player on Linux (before 11.2.202.350), and Adobe A...
CVE-2015-3129
Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.
CVE-2015-5131
CVE-2015-5131 describes a buffer overflow in Adobe Flash Player that allows arbitrary code execution on Windows, OS X, and Linux, and affects Adobe AIR (and AIR SDK/Compiler). The vulnerability arises from improper handling during parsing of SWF data, with the root cause identified as a buffer ov...
CVE-2015-5564
CVE-2015-5564 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products: Flash Player on Windows/OS X prior to 18.0.0.232 and Linux prior to 11.2.202.508; Adobe AIR prior to 18.0.0.199 and Adobe AIR SDK/Compiler prior to 18.0.0.199. The v...
CVE-2015-6682
CVE-2015-6682 is a use-after-free in Adobe Flash Player (and related AIR components) that enables remote code execution via specially crafted SWF handling. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and macOS, and before 11.2.202.521 on Linux; A...
CVE-2015-7660
Technical details for CVE-2015-7660 are not publicly provided in the supplied documents. Monitor for updates in connected sources; no specifics on affected products, root cause, impact, or fixes are available here.
CVE-2015-8454
CVE-2015-8454 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK before specified version bounds, allowing arbitrary code execution via unspecified vectors. Affects Flash Player pre-18.0.0.268, 19.x pre-20.0.0.228 (Windows/macOS); Linux pre-11.2...
CVE-2015-8643
Technical details about CVE-2015-8643 are not publicly available in the provided connected documents. Monitor for updates and additional disclosures to determine affected products, root cause, and remediation.
CVE-2015-8645
Adobe Flash Player and Adobe AIR (and related SDK components) are affected by CVE-2015-8645 due to memory corruption from unspecified vectors, enabling arbitrary code execution or memory corruption/DoS. Affected versions: Flash Player before 18.0.0.324 and 19.x and before 20.0.0.267 on Windows/OS...
CVE-2016-0995
Technical details for CVE-2016-0995 are not publicly provided in the supplied documents; no affected products, vectors, or remediation are specified here. Monitor for updates.
CVE-2016-4130
CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...
CVE-2016-4271
Adobe Flash Player (Windows/macOS: prior to 18.0.0.375 and 19.x up to 23.x before 23.0.0.162; Linux: before 11.2.202.635) is associated with CVE-2016-4271, described as bypassing intended access restrictions and enabling information disclosure via unspecified vectors. Connected advisories show pa...
CVE-2016-6931
Technical details for CVE-2016-6931 are not publicly available in the provided documents. Monitor for updates.
CVE-2016-6989
Technical details for CVE-2016-6989 are not publicly provided in the supplied documents; no validated affected products, vulnerable components, or remediation are described here. Monitor for updates in connected sources for concrete information.
CVE-2016-7879
CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...
CVE-2017-3058
CVE-2017-3058 concerns Adobe Flash Player: versions 25.0.0.127 and earlier are vulnerable to an exploitable use‑after‑free in the sound class, enabling arbitrary code execution. The issue is fixed by upgrading Flash Player to 25.0.0.148 (and related advisories reference APSB17-10). Affected produ...
CVE-2018-12825
CVE-2018-12825 affects Adobe Flash Player (older than 30.0.0.154; includes all Flash Player ActiveX/NPAPI/PPAPI builds). The issue is a security bypass vulnerability described as enabling a security mitigation bypass when exploited remotely, with high severity. Adobe’s APSB18-25 notes the vulnera...
CVE-2018-12827
CVE-2018-12827 concerns an out-of-bounds read in Adobe Flash Player 30.0.0.134 and earlier, leading to information disclosure. Public details consistently list Flash Player as the affected component and the root cause as an out-of-bounds read. Exploitation has been demonstrated in public advisori...
CVE-2008-4546
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610 are affected by CVE-2008-4546. The issue allows a remote web server to trigger a denial of service (NULL pointer dereference, browser crash) by returning a different response on a second HTTP request,...
CVE-2010-2187
Technical details for CVE-2010-2187 are not publicly available in the provided documents. Monitor for updates.
CVE-2013-0633
A buffer overflow vulnerability in Adobe Flash Player (versions before 10.3.183.51 and 11.x) allows remote attackers to execute arbitrary code by providing crafted SWF content . The flaw is triggered via the ActiveX component by supplying a specially crafted SWF file containing specific regex val...
CVE-2013-0642
Technical details for CVE-2013-0642 are not publicly available in the provided documents; monitor for updates.