CVE-2015-8422

Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.

CVE-2015-8454

CVE-2015-8454 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK before specified version bounds, allowing arbitrary code execution via unspecified vectors. Affects Flash Player pre-18.0.0.268, 19.x pre-20.0.0.228 (Windows/macOS); Linux pre-11.2...

CVE-2016-0991

A use-after-free vulnerability in Adobe Flash Player (before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR components enables arbitrary code execution via unspecified vectors. The entry CVE-2016-0991 also notes these are distin...

CVE-2016-0996

Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-4121

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4146

CVE-2016-4146 is a Flash Player vulnerability affecting Adobe Flash Player in the browser plugins used by IE/Edge, with a focus on memory corruption/use-after-free conditions that could lead to arbitrary code execution. Public advisories (e.g., Mageia and ALT Linux) group it with other CVEs (4122...

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...

CVE-2016-4275

Technical details for CVE-2016-4275 are not publicly provided in the supplied documents. Monitor official advisories for updates; EUVD entries reference malware but do not describe exploit vectors or affected products.

CVE-2016-7861

CVE-2016-7861 is an Adobe Flash Player type-confusion vulnerability that could enable remote code execution. Affected products/versions include Flash Player 11.2.202.643 and 23.0.0.205 and earlier. Connected advisories group this CVE with other Flash flaws (CVE-2016-7857/7858/7859/7860/7862/7863/...

CVE-2016-7890

CVE-2016-7890 affects Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier, describing a security bypass in the implementation of the same-origin policy. Connected advisories show this CVE being addressed in various Linux package updates: e.g., openSUSE openSUSE-2016-1...

CVE-2017-2928

Affected software: Adobe Flash Player versions 24.0.0.186 and earlier. Vulnerability: exploitable memory corruption in the JPEG XR/visual mode handling that could enable arbitrary code execution. Impact (as stated): remote code execution on the affected host. Status in connected sources: multiple...

CVE-2017-3075

CVE-2017-3075 affects Adobe Flash Player: a use-after-free in the ActionScript 2 XML handling can allow remote code execution. Affected are Flash Player versions earlier than 26.0.0.126; exploitation can lead to arbitrary code execution. Public advisories (MSRC, Arch Linux) instruct upgrading to ...

CVE-2017-3100

Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...

CVE-2017-3114

CVE-2017-3114 affects Adobe Flash Player before 27.0.0.187. The issue arises from an invalid (out-of-range) pointer offset during access of internal data structure fields, causing an out-of-bounds read/write in a computation used for language/region functionality. This vulnerability can enable ar...

CVE-2009-1868

CVE-2009-1868 describes a heap-based buffer overflow in Adobe Flash Player (before 9.0.246.0 and in 10.x before 10.0.32.18) and Adobe AIR (before 1.5.2) that can allow a denial of service or possibly arbitrary code execution via unspecified vectors involving URL parsing. Connected advisories note...

CVE-2009-3794

CVE-2009-3794 describes a heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 triggered by crafted JPEG data in SWF files, enabling remote code execution. Connected advisories (e.g., RHSA-2009:1657/1658) indicate Red Hat patching Flash-Plugin with upgrade...

CVE-2011-0558

Adobe Flash Player contains a integer overflow vulnerability (CVE-2011-0558) in the ActionScript Function class that could allow remote code execution. Affected product: Flash Player prior to version 10.2.152.26. Root cause: overflow triggered by a large array length in Function-class code. Impac...

CVE-2011-2139

CVE-2011-2139 affects Adobe Flash Player prior to 10.3.183.5 (Windows/macOS/Linux/Solaris) and 10.3.186.3 on Android, plus Adobe AIR prior to 2.7.1 (Windows/Mac) and 2.7.1.1961 (Android). It enables remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified...

CVE-2013-0645

Technical details (affected component, vulnerable version, exploit information, and remediation) are not provided in the supplied documents; monitor for updates .

CVE-2013-1370

Technical details for CVE-2013-1370 are not publicly available in the provided documents. The connected EUVD entries mention malware but do not specify affected products, versions, or exploit information. Monitor for updates.

CVE-2014-0498

CVE-2014-0498: A stack-based buffer overflow in Adobe Flash Player (and related AIR components) allows arbitrary code execution via unspecified vectors. Affected products/versions (per the initial description): Flash Player before 11.7.700.269 and 11.8.x up to 12.0.x before 12.0.0.70 on Windows a...

CVE-2014-0510

CVE-2014-0510 involves a heap-based buffer overflow in Adobe Flash Player 12.0.0.77 . The issue allows remote code execution and can bypass sandbox protections via unspecified vectors, as demonstrated by researchers during a Pwn2Own/CanSecWest 2014 event. Affected product is Flash Player (version...

CVE-2014-0581

CVE-2014-0581 is a memory‑corruption vulnerability in Adobe Flash Player caused by an error in parsing a specially crafted SWF file, reported across multiple advisories. The flaw can allow a remote attacker to corrupt memory, with potential for arbitrary code execution, as described by CPAI advis...

CVE-2015-3089

CVE-2015-3089 affects Adobe Flash Player prior to 13.0.0.289 and 14.x up to 17.x prior to 17.0.0.188 (Windows/macOS) and prior to 11.2.202.460 on Linux, as well as Adobe AIR and AIR SDKs up to 17.0.0.172. It causes memory corruption leading to arbitrary code execution or denial of service via uns...

CVE-2015-3093

CVE-2015-3093 is a memory‑corruption vulnerability in Adobe Flash Player (and related AIR components) triggered by parsing SWF content. Affects Windows/macOS/Linux; vulnerable versions include Flash Player before 13.0.0.289 and 14.x–17.x before 17.0.0.188 on Windows/macOS and before 11.2.202.460 ...

CVE-2015-3106

Adobe Flash Player contains a use-after-free vulnerability (CVE-2015-3106) that allows arbitrary code execution via unspecified vectors. Affected products include Flash Player before 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR bef...

CVE-2015-7652

CVE-2015-7652 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X) and Adobe AIR with a crafted gridFitType value, allowing arbitrary code execution. Affected: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X; Flash for Linux before 11.2.202.548; Adobe A...

CVE-2015-7656

A use-after-free vulnerability in Adobe Flash Player affects Windows and OS X (before 18.0.0.261 and 19.x before 19.0.0.245) and Linux (before 11.2.202.548), as well as Adobe AIR before 19.0.0.241, AIR SDK before 19.0.0.241, and AIR SDK & Compiler before 19.0.0.241. It allows an attacker to execu...

CVE-2015-7661

Technical details about CVE-2015-7661 are not publicly available in the provided documents. No product/impact/exploit information is present in the connected EUVD entries. Monitor for updates and rely on official advisories for specifics.

CVE-2015-8045

Technical details for CVE-2015-8045 are not publicly available in the provided documents. No concrete affected products, root cause, impact or remediation are specified here. Monitor for updates.

CVE-2015-8056

Technical details for CVE-2015-8056 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8057

Technical details for CVE-2015-8057 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8402

Technical details about CVE-2015-8402 are not publicly provided in the connected documents. Monitor for updates and new disclosures from official advisories or vendor bulletins.

CVE-2015-8446

Adobe Flash Player and Adobe AIR are affected by a heap-based memory corruption vulnerability triggered while parsing MP3 files with COMM tags. Affected products/versions include Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux; AIR ...

CVE-2015-8636

CVE-2015-8636 affects Adobe Flash Player and related AIR components. The vulnerability is described as a memory corruption issue that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors, affecting Windows, OS X, and Linux builds (Flash Player pri...

CVE-2016-0965

Adobe Flash Player and Adobe AIR vulnerabilities (CVE-2016-0965) allow attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Affected: Adobe Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x/20.x prior to 20.0.0.306; Linux before 11.2.202.569. Affected A...

CVE-2016-1027

Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.

CVE-2016-4123

CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...

CVE-2016-4134

CVE-2016-4134 is an Adobe Flash Player vulnerability that was addressed as part of the APSB16-18 bulletin. Several connected advisories indicate the fix was delivered by upgrading Flash Player to 11.2.202.626 (e.g., SUSE/openSUSE updates, ALT Linux packages, and Red Hat advisories). The provided ...

CVE-2016-4148

CVE-2016-4148 is part of a family of Flash Player vulnerabilities fixed in 2016 across multiple advisories. Connected records confirm multiple CVEs (including 4148) with a range of memory corruption issues (use-after-free, heap overflows, type confusion, information disclosure) that could lead to...

CVE-2016-4174

No concrete technical details about CVE-2016-4174 are provided in the connected documents. The EUVD entries refer to malware in sbrugna but do not specify affected product/version/root cause for this CVE. Monitor for updates.

CVE-2016-4188

Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.

CVE-2016-4278

Technical details for CVE-2016-4278 are not publicly available in the provided documents. Monitor for updates from official advisories and affected vendors.

CVE-2016-6983

Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.

CVE-2016-7860

CVE-2016-7860 is an exploitable type-confusion vulnerability in Adobe Flash Player that could lead to arbitrary code execution. According to the provided documents, affected versions include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier. The vulnerabilities are addressed in upd...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2007-6637

CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...

CVE-2009-1867

CVE-2009-1867: Adobe Flash Player (before 9.0.246.0 and before 10.0.32.18 for 10.x) and Adobe AIR before 1.5.2 are affected by a clickjacking vulnerability. The issue can trick a user into (1) selecting a link or (2) completing a dialog. Remediation is to update Flash Player to a newer version (e...