CVE-2015-3083

CVE-2015-3083 affects Adobe Flash Player and Adobe AIR. The issue is a validation bypass in Flash Player by an error in the Flash IE broker while parsing a specially crafted SWF/file, allowing a remote attacker to bypass restrictions on filesystem write operations (via unspecified vectors). Affec...

CVE-2015-3092

CVE-2015-3092 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK/SDK & Compiler. The issue arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors (memory disclosure risk). Affected range includes Flash Player...

CVE-2015-3096

CVE-2015-3096 relates to Adobe Flash Player and related AIR components; connected sources indicate a CSRF issue linked to an incomplete fix for CVE-2014-5333, enabling CSRF via crafted SWF/OBJECT content and potentially bypassing protections. Details about affected versions are provided in adviso...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.

CVE-2015-5558

CVE-2015-5558 affects Adobe Flash Player prior to 18.0.0.232 on Windows/OS X and prior to 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK/Compiler before 18.0.0.199). The underlying issue is a type confusion that enables arbitrary code execution when handling SWF content...

CVE-2015-7629

CVE-2015-7629 is a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and in Adobe AIR before 19.0.0.213 (and AIR SDK/SDK & Compiler before 19.0.0.213) that allows arbitrary code execution via a crafted Text...

CVE-2015-7660

Technical details for CVE-2015-7660 are not publicly provided in the supplied documents. Monitor for updates in connected sources; no specifics on affected products, root cause, impact, or fixes are available here.

CVE-2015-8042

Technical details of CVE-2015-8042 are not publicly available in the provided documents; the connected EUVD entries describe malware references but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2015-8046

Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.

CVE-2015-8425

This CVE concerns a use-after-free in Adobe Flash Player (and related AIR components) that allows arbitrary code execution. Affected products/versions include: Flash Player before 18.0.0.268 and 19.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204...

CVE-2015-8643

Technical details about CVE-2015-8643 are not publicly available in the provided connected documents. Monitor for updates and additional disclosures to determine affected products, root cause, and remediation.

CVE-2016-1005

CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...

CVE-2016-4151

CVE-2016-4151 is described as an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, affecting the Flash library components used by Internet Explorer 10/11 and Microsoft Edge. The connected documents attribute the issue to ShimContentFactory.retrieveResolvers...

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.

CVE-2016-4282

Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6932

Technical details about CVE-2016-6932 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6981

CVE-2016-6981 is a use-after-free vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux prior to the stated fixed versions. The vulnerability could allow arbitrary code execution via unspecified vectors and is described as a remote code execution issue. Public notes in connected ...

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2016-7863

CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...

CVE-2016-7879

CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2996

CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...

CVE-2017-2998

CVE-2017-2998 is a memory corruption vulnerability in Adobe Flash Player ≤ 24.0.0.221, specifically in the Primetime TVSDK API functionality related to timeline interactions that could enable arbitrary code execution. Public postings in multiple advisories confirm a remote, user-triggered risk wi...

CVE-2018-12825

CVE-2018-12825 affects Adobe Flash Player (older than 30.0.0.154; includes all Flash Player ActiveX/NPAPI/PPAPI builds). The issue is a security bypass vulnerability described as enabling a security mitigation bypass when exploited remotely, with high severity. Adobe’s APSB18-25 notes the vulnera...

CVE-2009-1864

CVE-2009-1864 is a heap-based buffer overflow in Adobe Flash Player (pre-9.0.246.0 and in the 10.x line prior to 10.0.32.18) and Adobe AIR before 1.5.2 that can crash the application or possibly allow arbitrary code execution via unspecified vectors. Affected components include Flash Player and A...

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2011-2137

CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....

CVE-2011-2414

CVE-2011-2414: Buffer overflow in Adobe Flash Player (pre-10.3.183.5 Windows/Mac/Linux/Solaris; pre-10.3.186.3 Android) and Adobe AIR (pre-2.7.1) allowing arbitrary code execution via unspecified vectors. Public references link to Adobe APSB11-21; openSUSE/SUSE patches (flash-player-4976) address...

CVE-2011-2430

Adobe Flash Player vulnerable to a streaming media logic error (CVE-2011-2430). Affected versions: Windows, macOS, Linux, and Solaris builds prior to 10.3.183.10; Android prior to 10.3.186.7. The issue allows remote code execution via crafted streaming media. Severity is high (CVSSv2 base 9.3). A...

CVE-2013-0642

Technical details for CVE-2013-0642 are not publicly available in the provided documents; monitor for updates.

CVE-2013-1378

CVE-2013-1378 affects Adobe Flash Player prior to 10.3.183.75/11.x before 11.7.700.169 on Windows and macOS, prior to 10.3.183.75/11.x before 11.2.202.280 on Linux, prior to 11.1.111.50 on Android 2.x/3.x, and prior to 11.1.115.54 on Android 4.x; and Adobe AIR before 3.7.0.1530 (and AIR SDK & Com...

CVE-2013-1380

Adobe Flash Player and AIR are affected by CVE-2013-1380. The vulnerability enables arbitrary code execution or memory corruption via unspecified vectors and is mitigated by updating Flash Player to version 11.2.202.280 (and corresponding AIR fixes) as part of the openSUSE/OpenVAS advisories refe...

CVE-2014-0558

CVE-2014-0558 affects Adobe Flash Player prior to 13.0.0.250 and 14.x before 15.0.0.189 on Windows/macOS, and prior to 11.2.202.411 on Linux, plus Adobe AIR prior to 15.0.0.293/SDK before 15.0.0.302. The vulnerability is a memory corruption flaw that allows remote arbitrary code execution or deni...

CVE-2014-5333

Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...

CVE-2015-3084

CVE-2015-3084 is a type-confusion vulnerability in Adobe Flash Player circa 2015. The issue allows arbitrary code execution via type-confusion in Flash’s filters (e.g., Button/MovieClip filters), with the root cause being invalid redefinition of filter constructors leading to mismatched native an...

CVE-2015-3087

CVE-2015-3087 is an integer overflow vulnerability in Adobe Flash Player (Windows/OS X: affected builds before 17.0.0.188; Linux before 11.2.202.460; earlier 13.0.0.289 and 14.x–16.x) and in Adobe AIR before 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue allows attackers to execut...

CVE-2015-3124

CVE-2015-3124 is a use-after-free flaw in Adobe Flash Player (pre-13.0.0.302, 14.x up to 18.x before 18.0.0.203 on Windows/OS X and before 11.2.202.481 on Linux), Adobe AIR before 18.0.0.180, and associated AIR SDK/Compiler versions. The vulnerability allows attackers to execute arbitrary code vi...

CVE-2015-3129

Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.

CVE-2015-5116

CVE-2015-5116 affects Adobe Flash Player and related AIR components. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors, impacting Windows/OS X Flash Player versions prior to 13.0.0.302 and 14.x through 18.x prior to 18.0.0.203, and Linux Flash Play...

CVE-2015-5117

Technical details for CVE-2015-5117 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-7633

CVE-2015-7633 corresponds to a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, identified as “APSB15-25.” Connected advisories confirm a remote attacker can exploit a crafted SWF file to potentially execute arbitrary code or cause a crash. Affected products...

CVE-2015-8069

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8422

Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.

CVE-2015-8454

CVE-2015-8454 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK before specified version bounds, allowing arbitrary code execution via unspecified vectors. Affects Flash Player pre-18.0.0.268, 19.x pre-20.0.0.228 (Windows/macOS); Linux pre-11.2...

CVE-2016-0991

A use-after-free vulnerability in Adobe Flash Player (before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR components enables arbitrary code execution via unspecified vectors. The entry CVE-2016-0991 also notes these are distin...

CVE-2016-0996

Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4146

CVE-2016-4146 is a Flash Player vulnerability affecting Adobe Flash Player in the browser plugins used by IE/Edge, with a focus on memory corruption/use-after-free conditions that could lead to arbitrary code execution. Public advisories (e.g., Mageia and ALT Linux) group it with other CVEs (4122...

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...