CVE-2015-3089

CVE-2015-3089 affects Adobe Flash Player prior to 13.0.0.289 and 14.x up to 17.x prior to 17.0.0.188 (Windows/macOS) and prior to 11.2.202.460 on Linux, as well as Adobe AIR and AIR SDKs up to 17.0.0.172. It causes memory corruption leading to arbitrary code execution or denial of service via uns...

CVE-2015-4433

CVE-2015-4433 describes a type confusion vulnerability in Adobe Flash Player and Adobe AIR that can lead to remote code execution. Affected products include Flash Player on Windows/OS X before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203, Linux Flash Player before 11.2.202.481, and Adobe AIR ...

CVE-2015-7629

CVE-2015-7629 is a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and in Adobe AIR before 19.0.0.213 (and AIR SDK/SDK & Compiler before 19.0.0.213) that allows arbitrary code execution via a crafted Text...

CVE-2015-8045

Technical details for CVE-2015-8045 are not publicly available in the provided documents. No concrete affected products, root cause, impact or remediation are specified here. Monitor for updates.

CVE-2015-8049

Technical details about CVE-2015-8049 are not provided in the connected documents. Monitor official advisories for updates; the supplied materials do not specify affected products/versions or fixes.

CVE-2015-8413

Technical details about CVE-2015-8413 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates from sources in the connected documents.

CVE-2015-8422

Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.

CVE-2015-8445

CVE-2015-8445 involves an integer overflow in the Shader filter implementation of Adobe Flash Player and related AIR components. The vulnerability can allow an attacker to execute arbitrary code via a large BitmapData source object. Affected products include Adobe Flash Player on Windows and OS X...

CVE-2016-0965

Adobe Flash Player and Adobe AIR vulnerabilities (CVE-2016-0965) allow attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Affected: Adobe Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x/20.x prior to 20.0.0.306; Linux before 11.2.202.569. Affected A...

CVE-2016-1027

Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-4121

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...

CVE-2016-4145

CVE-2016-4145 is tied to Adobe Flash Player used in Internet Explorer 10/11 and Edge. The connected sources show this CVE as part of a broader set of Flash vulnerabilities (CVE-2016-4122 through CVE-2016-4148) patched by Adobe in APSB16-18, with open-source advisories from SUSE/OpenSUSE and Red H...

CVE-2016-4174

No concrete technical details about CVE-2016-4174 are provided in the connected documents. The EUVD entries refer to malware in sbrugna but do not specify affected product/version/root cause for this CVE. Monitor for updates.

CVE-2016-4223

Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...

CVE-2016-4282

Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6932

Technical details about CVE-2016-6932 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6983

Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.

CVE-2016-7860

CVE-2016-7860 is an exploitable type-confusion vulnerability in Adobe Flash Player that could lead to arbitrary code execution. According to the provided documents, affected versions include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier. The vulnerabilities are addressed in upd...

CVE-2016-7861

CVE-2016-7861 is an Adobe Flash Player type-confusion vulnerability that could enable remote code execution. Affected products/versions include Flash Player 11.2.202.643 and 23.0.0.205 and earlier. Connected advisories group this CVE with other Flash flaws (CVE-2016-7857/7858/7859/7860/7862/7863/...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-3075

CVE-2017-3075 affects Adobe Flash Player: a use-after-free in the ActionScript 2 XML handling can allow remote code execution. Affected are Flash Player versions earlier than 26.0.0.126; exploitation can lead to arbitrary code execution. Public advisories (MSRC, Arch Linux) instruct upgrading to ...

CVE-2017-3100

Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...

CVE-2017-3114

CVE-2017-3114 affects Adobe Flash Player before 27.0.0.187. The issue arises from an invalid (out-of-range) pointer offset during access of internal data structure fields, causing an out-of-bounds read/write in a computation used for language/region functionality. This vulnerability can enable ar...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2013-0646

CVE-2013-0646 technical details are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates from the referenced advisories.

CVE-2013-1378

CVE-2013-1378 affects Adobe Flash Player prior to 10.3.183.75/11.x before 11.7.700.169 on Windows and macOS, prior to 10.3.183.75/11.x before 11.2.202.280 on Linux, prior to 11.1.111.50 on Android 2.x/3.x, and prior to 11.1.115.54 on Android 4.x; and Adobe AIR before 3.7.0.1530 (and AIR SDK & Com...

CVE-2014-0520

CVE-2014-0520 is a security bypass vulnerability in Adobe Flash Player and AIR components. Affected are Flash Player versions prior to 13.0.0.214 (Windows/macOS) and prior to 11.2.202.359 (Linux), plus AIR SDK before 13.0.0.111 and AIR SDK & Compiler before 13.0.0.111. The issue stems from an err...

CVE-2014-0581

CVE-2014-0581 is a memory‑corruption vulnerability in Adobe Flash Player caused by an error in parsing a specially crafted SWF file, reported across multiple advisories. The flaw can allow a remote attacker to corrupt memory, with potential for arbitrary code execution, as described by CPAI advis...

CVE-2015-3124

CVE-2015-3124 is a use-after-free flaw in Adobe Flash Player (pre-13.0.0.302, 14.x up to 18.x before 18.0.0.203 on Windows/OS X and before 11.2.202.481 on Linux), Adobe AIR before 18.0.0.180, and associated AIR SDK/Compiler versions. The vulnerability allows attackers to execute arbitrary code vi...

CVE-2015-3131

Adobe Flash Player and AIR products are affected by a use-after-free vulnerability (CVE-2015-3131) that could allow arbitrary code execution. Affected ranges include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux; Adobe AIR...

CVE-2015-3132

CVE-2015-3132 is a use-after-free vulnerability in Adobe Flash Player (pre-13.0.0.302 and 14.x–18.x before 18.0.0.203 on Windows/macOS; before 11.2.202.481 on Linux) and Adobe AIR before 18.0.0.180, plus AIR SDK kits before 18.0.0.180, that could allow arbitrary code execution via unspecified vec...

CVE-2015-7633

CVE-2015-7633 corresponds to a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, identified as “APSB15-25.” Connected advisories confirm a remote attacker can exploit a crafted SWF file to potentially execute arbitrary code or cause a crash. Affected products...

CVE-2015-7661

Technical details about CVE-2015-7661 are not publicly available in the provided documents. No product/impact/exploit information is present in the connected EUVD entries. Monitor for updates and rely on official advisories for specifics.

CVE-2015-8042

Technical details of CVE-2015-8042 are not publicly available in the provided documents; the connected EUVD entries describe malware references but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2015-8046

Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.

CVE-2015-8056

Technical details for CVE-2015-8056 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8057

Technical details for CVE-2015-8057 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8069

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8402

Technical details about CVE-2015-8402 are not publicly provided in the connected documents. Monitor for updates and new disclosures from official advisories or vendor bulletins.

CVE-2015-8407

CVE-2015-8407 is a heap buffer overflow in Adobe Flash Player before 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before that version). The vulnerability allows attackers to execute arbitrary...

CVE-2015-8446

Adobe Flash Player and Adobe AIR are affected by a heap-based memory corruption vulnerability triggered while parsing MP3 files with COMM tags. Affected products/versions include Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux; AIR ...

CVE-2015-8636

CVE-2015-8636 affects Adobe Flash Player and related AIR components. The vulnerability is described as a memory corruption issue that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors, affecting Windows, OS X, and Linux builds (Flash Player pri...

CVE-2015-8654

Technical details about CVE-2015-8654 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates from official advisories.

CVE-2016-0991

A use-after-free vulnerability in Adobe Flash Player (before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR components enables arbitrary code execution via unspecified vectors. The entry CVE-2016-0991 also notes these are distin...

CVE-2016-4123

CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4148

CVE-2016-4148 is part of a family of Flash Player vulnerabilities fixed in 2016 across multiple advisories. Connected records confirm multiple CVEs (including 4148) with a range of memory corruption issues (use-after-free, heap overflows, type confusion, information disclosure) that could lead to...

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.