CVE-2016-4146

CVE-2016-4146 is a Flash Player vulnerability affecting Adobe Flash Player in the browser plugins used by IE/Edge, with a focus on memory corruption/use-after-free conditions that could lead to arbitrary code execution. Public advisories (e.g., Mageia and ALT Linux) group it with other CVEs (4122...

CVE-2016-6931

Technical details for CVE-2016-6931 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6989

Technical details for CVE-2016-6989 are not publicly provided in the supplied documents; no validated affected products, vulnerable components, or remediation are described here. Monitor for updates in connected sources for concrete information.

CVE-2016-7863

CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...

CVE-2017-3059

CVE-2017-3059 is a use-after-free vulnerability in Adobe Flash Player (internal script object) affecting version 25.0.0.127 and earlier. Exploitation could lead to arbitrary code execution. Public advisories and vendor updates indicate remediation by upgrading Flash Player to 25.0.0.148 (e.g., SU...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-0584

CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...

CVE-2015-3083

CVE-2015-3083 affects Adobe Flash Player and Adobe AIR. The issue is a validation bypass in Flash Player by an error in the Flash IE broker while parsing a specially crafted SWF/file, allowing a remote attacker to bypass restrictions on filesystem write operations (via unspecified vectors). Affec...

CVE-2015-3087

CVE-2015-3087 is an integer overflow vulnerability in Adobe Flash Player (Windows/OS X: affected builds before 17.0.0.188; Linux before 11.2.202.460; earlier 13.0.0.289 and 14.x–16.x) and in Adobe AIR before 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue allows attackers to execut...

CVE-2015-3088

CVE-2015-3088 is a heap-based buffer overflow in Adobe Flash Player and related AIR components. Affected are Flash Player versions before 13.0.0.289 and before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; affected AIR/SDK components before 17.0.0.172. The description identifies t...

CVE-2015-3129

Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.

CVE-2015-5117

Technical details for CVE-2015-5117 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-5131

CVE-2015-5131 describes a buffer overflow in Adobe Flash Player that allows arbitrary code execution on Windows, OS X, and Linux, and affects Adobe AIR (and AIR SDK/Compiler). The vulnerability arises from improper handling during parsing of SWF data, with the root cause identified as a buffer ov...

CVE-2015-8058

Technical details for CVE-2015-8058 are not publicly provided in the supplied documents. No concrete impact, exploit, or remediation details are present. Monitor for updates from official advisories.

CVE-2015-8445

CVE-2015-8445 involves an integer overflow in the Shader filter implementation of Adobe Flash Player and related AIR components. The vulnerability can allow an attacker to execute arbitrary code via a large BitmapData source object. Affected products include Adobe Flash Player on Windows and OS X...

CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2015-8635

Technical details about CVE-2015-8635 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8647

CVE-2015-8647 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.324 and 19.x prior to 20.0.0.267 on Windows and macOS, and prior to 11.2.202.559 on Linux; Adobe AIR before 20.0.0.233 (and AIR SDK before/SDK & Compiler 20.0.0.233) allows arbitrary code execution via un...

CVE-2016-4151

CVE-2016-4151 is described as an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, affecting the Flash library components used by Internet Explorer 10/11 and Microsoft Edge. The connected documents attribute the issue to ShimContentFactory.retrieveResolvers...

CVE-2016-4173

Technical details about CVE-2016-4173 are not provided in the supplied documents. No affected products, versions, or fixes are specified here. Monitor official disclosures for updates.

CVE-2016-6987

CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....

CVE-2017-2988

CVE-2017-2988 is a memory corruption vulnerability in Adobe Flash Player (vulnerable up to 24.0.0.194) triggered during garbage collection, potentially enabling arbitrary code execution. Root cause: memory corruption during GC with vectors that can be exploited remotely; attack vector is NETWORK ...

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2017-3058

CVE-2017-3058 concerns Adobe Flash Player: versions 25.0.0.127 and earlier are vulnerable to an exploitable use‑after‑free in the sound class, enabling arbitrary code execution. The issue is fixed by upgrading Flash Player to 25.0.0.148 (and related advisories reference APSB17-10). Affected produ...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610 are affected by CVE-2008-4546. The issue allows a remote web server to trigger a denial of service (NULL pointer dereference, browser crash) by returning a different response on a second HTTP request,...

CVE-2010-2173

CVE-2010-2173 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR before 2.0.2.12610, with arbitrary code execution reported via unspecified vectors. The description notes an “invalid pointer vulnerability” related to the newclass (0x58) operator...

CVE-2010-3647

Technical details for CVE-2010-3647 are not publicly available in the provided connected documents. The initial description lists general vulnerabilities in Adobe Flash Player but does not specify affected versions, components, root cause, impact, or fixes.

CVE-2013-0504

CVE-2013-0504 is a buffer overflow in Adobe Flash Player’s broker service that allows arbitrary code execution. Affected versions include Windows and Mac OS X builds prior to 10.3.183.67, and 11.x prior to 11.6.602.171 for Windows/Mac; and Linux builds prior to 11.2.202.273. Connected advisories ...

CVE-2014-0509

CVE-2014-0509 describes a cross-site scripting (XSS) vulnerability in Adobe Flash Player and Adobe AIR products prior to the listed versions. Affected: Flash Player on Windows/macOS (before 11.7.700.275 and 11.8.x–13.0.x before 13.0.0.182), Flash Player on Linux (before 11.2.202.350), and Adobe A...

CVE-2014-0581

CVE-2014-0581 is a memory‑corruption vulnerability in Adobe Flash Player caused by an error in parsing a specially crafted SWF file, reported across multiple advisories. The flaw can allow a remote attacker to corrupt memory, with potential for arbitrary code execution, as described by CPAI advis...

CVE-2015-0334

CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...

CVE-2015-0335

CVE-2015-0335 is a memory corruption vulnerability in Adobe Flash Player. The issue arises from parsing crafted SWF/MP4 content, enabling remote code execution or memory corruption on Windows/macOS/Linux. Affected versions include Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.1...

CVE-2015-3077

Summary (CVE-2015-3077) : A type-confusion bug in Adobe Flash Player’s Button/ MovieClip filter setters allowed an attacker to overwrite a filter constructor, causing the native filter object to be backed by a differently-typed object. This enables manipulation of internal filter data via object ...

CVE-2015-3084

CVE-2015-3084 is a type-confusion vulnerability in Adobe Flash Player circa 2015. The issue allows arbitrary code execution via type-confusion in Flash’s filters (e.g., Button/MovieClip filters), with the root cause being invalid redefinition of filter constructors leading to mismatched native an...

CVE-2015-3093

CVE-2015-3093 is a memory‑corruption vulnerability in Adobe Flash Player (and related AIR components) triggered by parsing SWF content. Affects Windows/macOS/Linux; vulnerable versions include Flash Player before 13.0.0.289 and 14.x–17.x before 17.0.0.188 on Windows/macOS and before 11.2.202.460 ...

CVE-2015-6679

CVE-2015-6679 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 (Windows/macOS) and before 11.2.202.521 (Linux), plus Adobe AIR before 19.0.0.190. The issue is a bypass of the Same Origin Policy that can lead to information disclosure via unspecified vectors. Connected advis...

CVE-2015-7652

CVE-2015-7652 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X) and Adobe AIR with a crafted gridFitType value, allowing arbitrary code execution. Affected: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X; Flash for Linux before 11.2.202.548; Adobe A...

CVE-2015-7653

CVE-2015-7653 describes a use-after-free vulnerability in multiple Adobe products. Affected are: Adobe Flash Player prior to 18.0.0.261 and 19.x prior to 19.0.0.245 on Windows/OS X, and prior to 11.2.202.548 on Linux; Adobe AIR prior to 19.0.0.241; and Adobe AIR SDK/SDK & Compiler prior to 19.0.0...

CVE-2015-7660

Technical details for CVE-2015-7660 are not publicly provided in the supplied documents. Monitor for updates in connected sources; no specifics on affected products, root cause, impact, or fixes are available here.

CVE-2015-7661

Technical details about CVE-2015-7661 are not publicly available in the provided documents. No product/impact/exploit information is present in the connected EUVD entries. Monitor for updates and rely on official advisories for specifics.

CVE-2015-8045

Technical details for CVE-2015-8045 are not publicly available in the provided documents. No concrete affected products, root cause, impact or remediation are specified here. Monitor for updates.

CVE-2015-8056

Technical details for CVE-2015-8056 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8420

This CVE is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS) and Adobe AIR, with the following affected versions: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS; Flash Player on Linux before 11.2.202.554; Adobe AIR before 20.0.0.204; AIR SDK bef...

CVE-2015-8422

Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.

CVE-2015-8643

Technical details about CVE-2015-8643 are not publicly available in the provided connected documents. Monitor for updates and additional disclosures to determine affected products, root cause, and remediation.

CVE-2016-1099

CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...

CVE-2016-4121

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...