CVE-2009-1864

CVE-2009-1864 is a heap-based buffer overflow in Adobe Flash Player (pre-9.0.246.0 and in the 10.x line prior to 10.0.32.18) and Adobe AIR before 1.5.2 that can crash the application or possibly allow arbitrary code execution via unspecified vectors. Affected components include Flash Player and A...

CVE-2009-1867

CVE-2009-1867: Adobe Flash Player (before 9.0.246.0 and before 10.0.32.18 for 10.x) and Adobe AIR before 1.5.2 are affected by a clickjacking vulnerability. The issue can trick a user into (1) selecting a link or (2) completing a dialog. Remediation is to update Flash Player to a newer version (e...

CVE-2010-2165

Technical details for CVE-2010-2165 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2010-2189

CVE-2010-2189 involves Adobe Flash Player (first part: 9.0.277.0 and 10.x prior to 10.1.53.64) and Adobe AIR (before 2.0.2.12610) when used with VMware Tools on VMware, leading to memory corruption with potential arbitrary code execution and a possible denial of service. Connected sources confirm...

CVE-2011-2430

Adobe Flash Player vulnerable to a streaming media logic error (CVE-2011-2430). Affected versions: Windows, macOS, Linux, and Solaris builds prior to 10.3.183.10; Android prior to 10.3.186.7. The issue allows remote code execution via crafted streaming media. Severity is high (CVSSv2 base 9.3). A...

CVE-2012-5256

CVE-2012-5256 concerns Adobe Flash Player and Adobe AIR. The vulnerability allows attackers to execute arbitrary code or cause a denial of service via memory corruption, with unspecified attack vectors. Affected Flash Player versions include Windows/macOS: before 10.3.183.29 and 11.x before 11.4....

CVE-2015-3087

CVE-2015-3087 is an integer overflow vulnerability in Adobe Flash Player (Windows/OS X: affected builds before 17.0.0.188; Linux before 11.2.202.460; earlier 13.0.0.289 and 14.x–16.x) and in Adobe AIR before 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue allows attackers to execut...

CVE-2015-3132

CVE-2015-3132 is a use-after-free vulnerability in Adobe Flash Player (pre-13.0.0.302 and 14.x–18.x before 18.0.0.203 on Windows/macOS; before 11.2.202.481 on Linux) and Adobe AIR before 18.0.0.180, plus AIR SDK kits before 18.0.0.180, that could allow arbitrary code execution via unspecified vec...

CVE-2015-7631

CVE-2015-7631 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. It allows attackers to execute arbitrary code via a TextLine object with a crafted validity property. Affected: Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; Flash Player...

CVE-2015-7653

CVE-2015-7653 describes a use-after-free vulnerability in multiple Adobe products. Affected are: Adobe Flash Player prior to 18.0.0.261 and 19.x prior to 19.0.0.245 on Windows/OS X, and prior to 11.2.202.548 on Linux; Adobe AIR prior to 19.0.0.241; and Adobe AIR SDK/SDK & Compiler prior to 19.0.0...

CVE-2015-7661

Technical details about CVE-2015-7661 are not publicly available in the provided documents. No product/impact/exploit information is present in the connected EUVD entries. Monitor for updates and rely on official advisories for specifics.

CVE-2015-8042

Technical details of CVE-2015-8042 are not publicly available in the provided documents; the connected EUVD entries describe malware references but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2015-8654

Technical details about CVE-2015-8654 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates from official advisories.

CVE-2016-0991

A use-after-free vulnerability in Adobe Flash Player (before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR components enables arbitrary code execution via unspecified vectors. The entry CVE-2016-0991 also notes these are distin...

CVE-2016-0996

Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-0999

CVE-2016-0999 is a use-after-free in Adobe Flash Player (Windows/OS X: before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR before 21.0.0.176, enabling arbitrary code execution via unspecified vectors. A remote code execution bug tied to a crafted SWF...

CVE-2016-1104

Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.

CVE-2016-4136

CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...

CVE-2016-4140

CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...

CVE-2016-4143

CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...

CVE-2016-4225

CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...

CVE-2016-4245

Technical details for CVE-2016-4245 are not present in the provided documents. The connected EUVD entries mention malware 'sbrugna' but do not specify affected products, versions, or root cause for this CVE. Monitor for updates.

CVE-2017-3060

Adobe Flash Player, versions 25.0.0.127 and earlier, contains a memory corruption vulnerability in the ActionScript2 parser that could lead to arbitrary code execution. Evidence across multiple connected advisories indicates updating to 25.0.0.148 mitigates the issue (APS B17-10) and patches CVE-...

CVE-2017-3062

Adobe Flash Player: CVE-2017-3062 is a use-after-free vulnerability in ActionScript2 when creating a getter/setter property, affecting Flash Player 25.0.0.127 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is caused by a memory-management flaw in the affect...

CVE-2007-6637

CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2011-0621

CVE-2011-0621 concerns Adobe Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability permits attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors, and is described as ...

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2014-0590

CVE-2014-0590 is a type-confusion vulnerability in Adobe Flash Player that could allow remote code execution via a specially crafted SWF file. According to the provided documents, affected versions include Flash Player before 13.0.0.252 and 14.x, and before 15.0.0.223 on Windows and OS X, plus be...

CVE-2015-3099

CVE-2015-3099 concerns Adobe Flash Player and related Adobe AIR components. Affected versions include Flash Player 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X/Android; and...

CVE-2015-3123

CVE-2015-3123 affects Adobe Flash Player (Windows/OS X: <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and Adobe AIR (<18.0.0.180, AIR SDK/SDK & Compiler

CVE-2015-4429

Adobe Flash Player (Windows, OS X, Linux) and related AIR components are affected by CVE-2015-4429, a NULL pointer dereference vulnerability. The issue arises when parsing crafted SWF/FLV content, potentially enabling denial of service and other unspecified impact. Affected versions included Flas...

CVE-2015-4432

CVE-2015-4432 is a heap-based buffer overflow in Adobe Flash Player (before 13.0.0.302 and before 18.0.0.203 for 14.x–18.x) on Windows, OS X, and before 11.2.202.481 on Linux, and in Adobe AIR/AIR SDK before 18.0.0.180. The vulnerability allows attackers to execute arbitrary code via unspecified ...

CVE-2015-6678

CVE-2015-6676 affects Adobe Flash Player and AIR components. The vulnerability is a buffer overflow in Flash Player before 18.0.0.241 and in the 19.x line before 19.0.0.185 (Windows/OS X) and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Th...

CVE-2015-8045

Technical details for CVE-2015-8045 are not publicly available in the provided documents. No concrete affected products, root cause, impact or remediation are specified here. Monitor for updates.

CVE-2015-8046

Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.

CVE-2015-8056

Technical details for CVE-2015-8056 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8402

Technical details about CVE-2015-8402 are not publicly provided in the connected documents. Monitor for updates and new disclosures from official advisories or vendor bulletins.

CVE-2015-8413

Technical details about CVE-2015-8413 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates from sources in the connected documents.

CVE-2015-8427

Technical details for CVE-2015-8427 are not publicly provided in the supplied documents; the connected EUVD entries reference malware context but do not reveal affected products, versions, vulnerabilities, or fixes. Monitor for updates from official advisories.

CVE-2015-8638

Technical details for CVE-2015-8638 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8642

Technical details about CVE-2015-8642 are not publicly provided in the connected EUVD entries. No concrete information on affected products, root cause, or remediation is present here. Monitor for updates as new details may be released.

CVE-2016-0965

Adobe Flash Player and Adobe AIR vulnerabilities (CVE-2016-0965) allow attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Affected: Adobe Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x/20.x prior to 20.0.0.306; Linux before 11.2.202.569. Affected A...

CVE-2016-0986

Technical details for CVE-2016-0986 are not publicly available in the provided connected documents; no concrete affected products, vulnerable components, or remediation specifics are present. Monitor for updates.

CVE-2016-1001

Adobe Flash Player and AIR (including AIR SDK variants) are affected by a heap-based buffer overflow (CVE-2016-1001) that could allow arbitrary code execution. Affected are Flash Player prior to 18.0.0.333 and 19.x–21.x prior to 21.0.0.182 on Windows/OS X, and prior to 11.2.202.577 on Linux; AIR ...

CVE-2016-1011

CVE-2016-1011 is a use-after-free vulnerability in Adobe Flash Player affecting the LoadVars.decode path. Affected are Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/macOS, and before 11.2.202.616 on Linux. Successful exploitation could allow arbitrary code exec...

CVE-2016-1014

CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...

CVE-2016-1027

Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.