1084 matches found
CVE-2016-6983
Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.
CVE-2016-7863
CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...
CVE-2017-2987
CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...
CVE-2017-3114
CVE-2017-3114 affects Adobe Flash Player before 27.0.0.187. The issue arises from an invalid (out-of-range) pointer offset during access of internal data structure fields, causing an out-of-bounds read/write in a computation used for language/region functionality. This vulnerability can enable ar...
CVE-2018-12825
CVE-2018-12825 affects Adobe Flash Player (older than 30.0.0.154; includes all Flash Player ActiveX/NPAPI/PPAPI builds). The issue is a security bypass vulnerability described as enabling a security mitigation bypass when exploited remotely, with high severity. Adobe’s APSB18-25 notes the vulnera...
CVE-2010-2213
CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...
CVE-2011-2430
Adobe Flash Player vulnerable to a streaming media logic error (CVE-2011-2430). Affected versions: Windows, macOS, Linux, and Solaris builds prior to 10.3.183.10; Android prior to 10.3.186.7. The issue allows remote code execution via crafted streaming media. Severity is high (CVSSv2 base 9.3). A...
CVE-2012-5256
CVE-2012-5256 concerns Adobe Flash Player and Adobe AIR. The vulnerability allows attackers to execute arbitrary code or cause a denial of service via memory corruption, with unspecified attack vectors. Affected Flash Player versions include Windows/macOS: before 10.3.183.29 and 11.x before 11.4....
CVE-2013-0642
Technical details for CVE-2013-0642 are not publicly available in the provided documents; monitor for updates.
CVE-2013-0647
Adobe Flash Player and Adobe AIR are affected by CVE-2013-0647, a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The affected products include Flash Player on Windows, Mac OS X, Linux, Android platforms,...
CVE-2013-1378
CVE-2013-1378 affects Adobe Flash Player prior to 10.3.183.75/11.x before 11.7.700.169 on Windows and macOS, prior to 10.3.183.75/11.x before 11.2.202.280 on Linux, prior to 11.1.111.50 on Android 2.x/3.x, and prior to 11.1.115.54 on Android 4.x; and Adobe AIR before 3.7.0.1530 (and AIR SDK & Com...
CVE-2015-3084
CVE-2015-3084 is a type-confusion vulnerability in Adobe Flash Player circa 2015. The issue allows arbitrary code execution via type-confusion in Flash’s filters (e.g., Button/MovieClip filters), with the root cause being invalid redefinition of filter constructors leading to mismatched native an...
CVE-2015-3088
CVE-2015-3088 is a heap-based buffer overflow in Adobe Flash Player and related AIR components. Affected are Flash Player versions before 13.0.0.289 and before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; affected AIR/SDK components before 17.0.0.172. The description identifies t...
CVE-2015-3089
CVE-2015-3089 affects Adobe Flash Player prior to 13.0.0.289 and 14.x up to 17.x prior to 17.0.0.188 (Windows/macOS) and prior to 11.2.202.460 on Linux, as well as Adobe AIR and AIR SDKs up to 17.0.0.172. It causes memory corruption leading to arbitrary code execution or denial of service via uns...
CVE-2015-3093
CVE-2015-3093 is a memory‑corruption vulnerability in Adobe Flash Player (and related AIR components) triggered by parsing SWF content. Affects Windows/macOS/Linux; vulnerable versions include Flash Player before 13.0.0.289 and 14.x–17.x before 17.0.0.188 on Windows/macOS and before 11.2.202.460 ...
CVE-2015-6682
CVE-2015-6682 is a use-after-free in Adobe Flash Player (and related AIR components) that enables remote code execution via specially crafted SWF handling. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and macOS, and before 11.2.202.521 on Linux; A...
CVE-2015-7633
CVE-2015-7633 corresponds to a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, identified as “APSB15-25.” Connected advisories confirm a remote attacker can exploit a crafted SWF file to potentially execute arbitrary code or cause a crash. Affected products...
CVE-2015-7661
Technical details about CVE-2015-7661 are not publicly available in the provided documents. No product/impact/exploit information is present in the connected EUVD entries. Monitor for updates and rely on official advisories for specifics.
CVE-2015-8045
Technical details for CVE-2015-8045 are not publicly available in the provided documents. No concrete affected products, root cause, impact or remediation are specified here. Monitor for updates.
CVE-2015-8046
Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.
CVE-2015-8056
Technical details for CVE-2015-8056 are not publicly available in the provided documents; monitor for updates.
CVE-2015-8413
Technical details about CVE-2015-8413 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates from sources in the connected documents.
CVE-2015-8422
Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.
CVE-2015-8445
CVE-2015-8445 involves an integer overflow in the Shader filter implementation of Adobe Flash Player and related AIR components. The vulnerability can allow an attacker to execute arbitrary code via a large BitmapData source object. Affected products include Adobe Flash Player on Windows and OS X...
CVE-2015-8454
CVE-2015-8454 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK before specified version bounds, allowing arbitrary code execution via unspecified vectors. Affects Flash Player pre-18.0.0.268, 19.x pre-20.0.0.228 (Windows/macOS); Linux pre-11.2...
CVE-2016-0996
Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2016-1104
Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.
CVE-2016-4123
CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...
CVE-2016-4145
CVE-2016-4145 is tied to Adobe Flash Player used in Internet Explorer 10/11 and Edge. The connected sources show this CVE as part of a broader set of Flash vulnerabilities (CVE-2016-4122 through CVE-2016-4148) patched by Adobe in APSB16-18, with open-source advisories from SUSE/OpenSUSE and Red H...
CVE-2016-4154
CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...
CVE-2016-4172
Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.
CVE-2016-6982
Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.
CVE-2016-7860
CVE-2016-7860 is an exploitable type-confusion vulnerability in Adobe Flash Player that could lead to arbitrary code execution. According to the provided documents, affected versions include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier. The vulnerabilities are addressed in upd...
CVE-2016-7861
CVE-2016-7861 is an Adobe Flash Player type-confusion vulnerability that could enable remote code execution. Affected products/versions include Flash Player 11.2.202.643 and 23.0.0.205 and earlier. Connected advisories group this CVE with other Flash flaws (CVE-2016-7857/7858/7859/7860/7862/7863/...
CVE-2017-2928
Affected software: Adobe Flash Player versions 24.0.0.186 and earlier. Vulnerability: exploitable memory corruption in the JPEG XR/visual mode handling that could enable arbitrary code execution. Impact (as stated): remote code execution on the affected host. Status in connected sources: multiple...
CVE-2017-2996
CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...
CVE-2017-3075
CVE-2017-3075 affects Adobe Flash Player: a use-after-free in the ActionScript 2 XML handling can allow remote code execution. Affected are Flash Player versions earlier than 26.0.0.126; exploitation can lead to arbitrary code execution. Public advisories (MSRC, Arch Linux) instruct upgrading to ...
CVE-2007-6637
CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...
CVE-2009-1867
CVE-2009-1867: Adobe Flash Player (before 9.0.246.0 and before 10.0.32.18 for 10.x) and Adobe AIR before 1.5.2 are affected by a clickjacking vulnerability. The issue can trick a user into (1) selecting a link or (2) completing a dialog. Remediation is to update Flash Player to a newer version (e...
CVE-2011-2137
CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....
CVE-2011-2445
CVE-2011-2445 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors, with m...
CVE-2013-0645
Technical details (affected component, vulnerable version, exploit information, and remediation) are not provided in the supplied documents; monitor for updates .
CVE-2013-0646
CVE-2013-0646 technical details are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates from the referenced advisories.
CVE-2014-0510
CVE-2014-0510 involves a heap-based buffer overflow in Adobe Flash Player 12.0.0.77 . The issue allows remote code execution and can bypass sandbox protections via unspecified vectors, as demonstrated by researchers during a Pwn2Own/CanSecWest 2014 event. Affected product is Flash Player (version...
CVE-2015-3132
CVE-2015-3132 is a use-after-free vulnerability in Adobe Flash Player (pre-13.0.0.302 and 14.x–18.x before 18.0.0.203 on Windows/macOS; before 11.2.202.481 on Linux) and Adobe AIR before 18.0.0.180, plus AIR SDK kits before 18.0.0.180, that could allow arbitrary code execution via unspecified vec...
CVE-2015-6679
CVE-2015-6679 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 (Windows/macOS) and before 11.2.202.521 (Linux), plus Adobe AIR before 19.0.0.190. The issue is a bypass of the Same Origin Policy that can lead to information disclosure via unspecified vectors. Connected advis...
CVE-2015-7656
A use-after-free vulnerability in Adobe Flash Player affects Windows and OS X (before 18.0.0.261 and 19.x before 19.0.0.245) and Linux (before 11.2.202.548), as well as Adobe AIR before 19.0.0.241, AIR SDK before 19.0.0.241, and AIR SDK & Compiler before 19.0.0.241. It allows an attacker to execu...
CVE-2015-8049
Technical details about CVE-2015-8049 are not provided in the connected documents. Monitor official advisories for updates; the supplied materials do not specify affected products/versions or fixes.