CVE-2015-8446

Adobe Flash Player and Adobe AIR are affected by a heap-based memory corruption vulnerability triggered while parsing MP3 files with COMM tags. Affected products/versions include Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux; AIR ...

CVE-2015-8636

CVE-2015-8636 affects Adobe Flash Player and related AIR components. The vulnerability is described as a memory corruption issue that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors, affecting Windows, OS X, and Linux builds (Flash Player pri...

CVE-2016-1001

Adobe Flash Player and AIR (including AIR SDK variants) are affected by a heap-based buffer overflow (CVE-2016-1001) that could allow arbitrary code execution. Affected are Flash Player prior to 18.0.0.333 and 19.x–21.x prior to 21.0.0.182 on Windows/OS X, and prior to 11.2.202.577 on Linux; AIR ...

CVE-2016-1027

Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.

CVE-2016-4134

CVE-2016-4134 is an Adobe Flash Player vulnerability that was addressed as part of the APSB16-18 bulletin. Several connected advisories indicate the fix was delivered by upgrading Flash Player to 11.2.202.626 (e.g., SUSE/openSUSE updates, ALT Linux packages, and Red Hat advisories). The provided ...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...

CVE-2016-4148

CVE-2016-4148 is part of a family of Flash Player vulnerabilities fixed in 2016 across multiple advisories. Connected records confirm multiple CVEs (including 4148) with a range of memory corruption issues (use-after-free, heap overflows, type confusion, information disclosure) that could lead to...

CVE-2016-4188

Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.

CVE-2016-6990

Technical details for CVE-2016-6990 are not provided in the connected documents. The available sources discuss malware activity generally and do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2016-7880

CVE-2016-7880 affects Adobe Flash Player up to version 23.0.0.207 / 11.2.202.644, where an exploitable use-after-free occurs when setting the length property of an array, potentially enabling arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 (and...

CVE-2016-7890

CVE-2016-7890 affects Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier, describing a security bypass in the implementation of the same-origin policy. Connected advisories show this CVE being addressed in various Linux package updates: e.g., openSUSE openSUSE-2016-1...

CVE-2017-3100

Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...

CVE-2007-0071

Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) are affected by CVE-2007-0071 due to an integer overflow triggered by a crafted SWF with a negative Scene Count value. The overflow occurs when a signed comparison is passed and the value is used as an offset of a NULL pointer, l...

CVE-2011-0621

CVE-2011-0621 concerns Adobe Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability permits attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors, and is described as ...

CVE-2011-2138

CVE-2011-2138 refers to an integer overflow in Adobe Flash Player (and associated AIR) that could allow code execution. Affected product scope includes Flash Player on Windows, macOS, Linux, Solaris (pre-10.3.183.5), and Android (pre-10.3.186.3), plus Adobe AIR on Windows/macOS (pre-2.7.1) and An...

CVE-2013-0630

CVE-2013-0630 relates to a buffer overflow in Adobe Flash Player (and Adobe AIR) that could allow arbitrary code execution. The provided Connected documents indicate affected products include Flash Player with platform variants (Windows, Mac OS X, Linux, Android) and Adobe AIR. The OpenVAS/Nessus...

CVE-2013-1370

Technical details for CVE-2013-1370 are not publicly available in the provided documents. The connected EUVD entries mention malware but do not specify affected products, versions, or exploit information. Monitor for updates.

CVE-2015-3082

CVE-2015-3082 affects Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK components. The vulnerability allows bypassing intended filesystem write restrictions via unspecified vectors, and is described as a separate issue from CVE-2015-3083 and CVE-2015-3085. Affected versions include Fla...

CVE-2015-3106

Adobe Flash Player contains a use-after-free vulnerability (CVE-2015-3106) that allows arbitrary code execution via unspecified vectors. Affected products include Flash Player before 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR bef...

CVE-2015-3124

CVE-2015-3124 is a use-after-free flaw in Adobe Flash Player (pre-13.0.0.302, 14.x up to 18.x before 18.0.0.203 on Windows/OS X and before 11.2.202.481 on Linux), Adobe AIR before 18.0.0.180, and associated AIR SDK/Compiler versions. The vulnerability allows attackers to execute arbitrary code vi...

CVE-2015-3127

Technical details (affected products, versions, impact, or exploit information for CVE-2015-3127) are not provided in the supplied connected documents. Monitor for updates.

CVE-2015-3131

Adobe Flash Player and AIR products are affected by a use-after-free vulnerability (CVE-2015-3131) that could allow arbitrary code execution. Affected ranges include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux; Adobe AIR...

CVE-2015-5125

CVE-2015-5125 affects Adobe Flash Player (Windows/OS X) prior to 18.0.0.232 and Adobe Flash Player for Linux prior to 11.2.202.508, as well as Adobe AIR prior to 18.0.0.199 (and AIR SDK/SDK & Compiler before 18.0.0.199). Root cause is a vector-length corruption that could cause a denial of servic...

CVE-2015-5550

CVE-2015-5550 corresponds to a use-after-free in Adobe Flash Player and related AIR components. Affected versions include Flash Player before 18.0.0.232 on Windows/OS X and before 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK before 18.0.0.199 and AIR SDK & Compiler be...

CVE-2015-5570

CVE-2015-5570 is a use-after-free vulnerability in Adobe Flash Player (affecting pre-18.0.0.241 and 19.x before 19.0.0.185) and Adobe AIR before 19.0.0.190, enabling remote code execution via specially crafted SWF handling. Adobe APSB15-23 patches are referenced; apply fixed builds to remediate.

CVE-2015-6679

CVE-2015-6679 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 (Windows/macOS) and before 11.2.202.521 (Linux), plus Adobe AIR before 19.0.0.190. The issue is a bypass of the Same Origin Policy that can lead to information disclosure via unspecified vectors. Connected advis...

CVE-2015-7652

CVE-2015-7652 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X) and Adobe AIR with a crafted gridFitType value, allowing arbitrary code execution. Affected: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X; Flash for Linux before 11.2.202.548; Adobe A...

CVE-2015-8057

Technical details for CVE-2015-8057 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8402

Technical details about CVE-2015-8402 are not publicly provided in the connected documents. Monitor for updates and new disclosures from official advisories or vendor bulletins.

CVE-2015-8407

CVE-2015-8407 is a heap buffer overflow in Adobe Flash Player before 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before that version). The vulnerability allows attackers to execute arbitrary...

CVE-2015-8420

This CVE is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS) and Adobe AIR, with the following affected versions: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS; Flash Player on Linux before 11.2.202.554; Adobe AIR before 20.0.0.204; AIR SDK bef...

CVE-2015-8644

CVE-2015-8644 targets Adobe Flash Player and AIR components. A type confusion vulnerability in Flash Player (Windows/macOS: before 18.0.0.324, 19.x and 20.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR before 20.0.0.233 could lead to arbitrary code execution. Some advisories note e...

CVE-2015-8654

Technical details about CVE-2015-8654 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates from official advisories.

CVE-2016-4136

CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...

CVE-2016-4140

CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...

CVE-2016-4185

Technical details for CVE-2016-4185 are not publicly provided in the supplied documents. Monitor for updates as connected EUVD entries reference malware but do not reveal product/version/impact specifics here.

CVE-2016-4276

Technical details for CVE-2016-4276 are not publicly available in the provided documents. Monitor for updates when connected sources (if any) publish specifics about affected products, vectors, impact, or remediation.

CVE-2016-4278

Technical details for CVE-2016-4278 are not publicly available in the provided documents. Monitor for updates from official advisories and affected vendors.

CVE-2016-6925

Technical details for CVE-2016-6925 are not publicly provided in the connected documents. Monitor for updates.

CVE-2016-6984

CVE-2016-6984 refers to memory corruption in Adobe Flash Player affecting multiple versions prior to 18.0.0.382 and 19.x up to 23.x before 23.0.0.185 on Windows/macOS, and Linux before 11.2.202.637. The vulnerability could allow arbitrary code execution or a denial of service via unspecified vect...

CVE-2017-3064

CVE-2017-3064 affects Adobe Flash Player (browser plug-in) up to version 25.0.0.127, with a memory corruption vulnerability triggered while parsing a shape outline that can lead to arbitrary code execution. The issue is confirmed in multiple CVE aggregations tied to APSB17-10; advisories note upg...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...

CVE-2008-5363

Affected software: Adobe Flash Player (10.x before 10.0.12.36; 9.x before 9.0.151.0) and Adobe AIR before 1.5. The issue: ActionScript 2 VM does not validate character elements when retrieved from the dictionary data structure, enabling a remote attacker to trigger a NULL pointer dereference and ...

CVE-2010-2167

CVE-2010-2167 is a vulnerability in Adobe Flash Player (before 9.0.277.0 and 10.x before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) where heap-based overflows in GIF/JPEG data could lead to arbitrary code execution. The initial description specifies the vectors as malformed GIF/JPEG data, wit...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2011-0623

CVE-2011-0623 affects Adobe Flash Player prior to 10.3.181.14 on Windows/macOS/Linux/Solaris and prior to 10.3.185.21 on Android. The vulnerability is described as a bounds-checking issue that enables arbitrary code execution. The connected documents reference the affected versions and patch leve...

CVE-2011-2136

CVE-2011-2136 is an Adobe Flash Player and Adobe AIR vulnerability described as an integer overflow that could allow remote code execution. Affected products include Flash Player prior to 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player prior to 10.3.186.3 on Android; and AIR before...

CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...

CVE-2014-0542

Technical details about CVE-2014-0542 are not publicly available in the provided documents; the connected EUVD entries and advisories mention related issues but do not disclose affected products, root causes, or fixes. Monitor for updates.