1084 matches found
CVE-2016-0999
CVE-2016-0999 is a use-after-free in Adobe Flash Player (Windows/OS X: before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR before 21.0.0.176, enabling arbitrary code execution via unspecified vectors. A remote code execution bug tied to a crafted SWF...
CVE-2016-6982
Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.
CVE-2017-2996
CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...
CVE-2017-3100
Adobe Flash Player prior to version 26.0.0.137 contains CVE-2017-3100, a memory corruption vulnerability in the Action Script 2 BitmapData class that could lead to memory address disclosure. Several connected advisories confirm this CVE is among a set of vulnerabilities fixed by upgrading to 26.0...
CVE-2015-3127
Technical details (affected products, versions, impact, or exploit information for CVE-2015-3127) are not provided in the supplied connected documents. Monitor for updates.
CVE-2015-5124
Technical details for CVE-2015-5124 are not publicly provided in the connected documents. No specific affected products, vectors, or fixes are described; monitor for updates.
CVE-2015-8042
Technical details of CVE-2015-8042 are not publicly available in the provided documents; the connected EUVD entries describe malware references but do not reveal affected products, root cause, or remediation. Monitor for updates.
CVE-2015-8059
Technical details (affected products, versions, root cause, impact, and fixes) for CVE-2015-8059 are not publicly provided in the connected EUVD entries; monitor for updates.
CVE-2015-8821
Technical details about CVE-2015-8821 are not publicly available in the provided connected documents. Monitor for official updates from vendors and security advisories.
CVE-2016-0986
Technical details for CVE-2016-0986 are not publicly available in the provided connected documents; no concrete affected products, vulnerable components, or remediation specifics are present. Monitor for updates.
CVE-2016-0996
Technical details for CVE-2016-0996 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2016-1027
Technical details about CVE-2016-1027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; this dataset does not specify affected products/versions, exploit information, or remediation specifics.
CVE-2016-1104
Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.
CVE-2016-1108
CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...
CVE-2016-4123
CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...
CVE-2016-4130
CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...
CVE-2016-4132
CVE-2016-4132 corresponds to an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries in IE10/IE11 and Edge, with unknown impact in the initial entry but later connected advisories list multiple memory corruption/code-execution related CVEs. Connected...
CVE-2016-4143
CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...
CVE-2016-4188
Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.
CVE-2016-4282
Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.
CVE-2016-7860
CVE-2016-7860 is an exploitable type-confusion vulnerability in Adobe Flash Player that could lead to arbitrary code execution. According to the provided documents, affected versions include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier. The vulnerabilities are addressed in upd...
CVE-2016-7861
CVE-2016-7861 is an Adobe Flash Player type-confusion vulnerability that could enable remote code execution. Affected products/versions include Flash Player 11.2.202.643 and 23.0.0.205 and earlier. Connected advisories group this CVE with other Flash flaws (CVE-2016-7857/7858/7859/7860/7862/7863/...
CVE-2007-3456
CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...
CVE-2009-1864
CVE-2009-1864 is a heap-based buffer overflow in Adobe Flash Player (pre-9.0.246.0 and in the 10.x line prior to 10.0.32.18) and Adobe AIR before 1.5.2 that can crash the application or possibly allow arbitrary code execution via unspecified vectors. Affected components include Flash Player and A...
CVE-2009-1867
CVE-2009-1867: Adobe Flash Player (before 9.0.246.0 and before 10.0.32.18 for 10.x) and Adobe AIR before 1.5.2 are affected by a clickjacking vulnerability. The issue can trick a user into (1) selecting a link or (2) completing a dialog. Remediation is to update Flash Player to a newer version (e...
CVE-2011-2414
CVE-2011-2414: Buffer overflow in Adobe Flash Player (pre-10.3.183.5 Windows/Mac/Linux/Solaris; pre-10.3.186.3 Android) and Adobe AIR (pre-2.7.1) allowing arbitrary code execution via unspecified vectors. Public references link to Adobe APSB11-21; openSUSE/SUSE patches (flash-player-4976) address...
CVE-2012-5256
CVE-2012-5256 concerns Adobe Flash Player and Adobe AIR. The vulnerability allows attackers to execute arbitrary code or cause a denial of service via memory corruption, with unspecified attack vectors. Affected Flash Player versions include Windows/macOS: before 10.3.183.29 and 11.x before 11.4....
CVE-2014-0510
CVE-2014-0510 involves a heap-based buffer overflow in Adobe Flash Player 12.0.0.77 . The issue allows remote code execution and can bypass sandbox protections via unspecified vectors, as demonstrated by researchers during a Pwn2Own/CanSecWest 2014 event. Affected product is Flash Player (version...
CVE-2014-0558
CVE-2014-0558 affects Adobe Flash Player prior to 13.0.0.250 and 14.x before 15.0.0.189 on Windows/macOS, and prior to 11.2.202.411 on Linux, plus Adobe AIR prior to 15.0.0.293/SDK before 15.0.0.302. The vulnerability is a memory corruption flaw that allows remote arbitrary code execution or deni...
CVE-2015-0327
CVE-2015-0327 is a vulnerability in Adobe Flash/AS3 where redefining a Proxy object via ECMAScript redefinition can cause an overflow when enumerating value properties during a stringify operation. Project Zero notes this is a type and memory-usage bug within the AVM/ECMAScript engine that can le...
CVE-2015-3086
CVE-2015-3086 is a type-confusion vulnerability in Adobe Flash Player, affecting Windows/macOS Flash (pre-13.0.0.289 and pre-17.0.0.188 for 14.x–17.x lines) and Linux (pre-11.2.202.460), plus Adobe AIR components (before 17.0.0.172). The connected analyses describe a class of type-confusion bugs ...
CVE-2015-3099
CVE-2015-3099 concerns Adobe Flash Player and related Adobe AIR components. Affected versions include Flash Player 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X/Android; and...
CVE-2015-3124
CVE-2015-3124 is a use-after-free flaw in Adobe Flash Player (pre-13.0.0.302, 14.x up to 18.x before 18.0.0.203 on Windows/OS X and before 11.2.202.481 on Linux), Adobe AIR before 18.0.0.180, and associated AIR SDK/Compiler versions. The vulnerability allows attackers to execute arbitrary code vi...
CVE-2015-5541
CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...
CVE-2015-5548
CVE-2015-5548 affects Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and AIR SDK/Compiler prior to 18.0.0.199. The vulnerability allows attackers to execute arbitrary code or cause a memory corruption-induced denial of serv...
CVE-2015-5550
CVE-2015-5550 corresponds to a use-after-free in Adobe Flash Player and related AIR components. Affected versions include Flash Player before 18.0.0.232 on Windows/OS X and before 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK before 18.0.0.199 and AIR SDK & Compiler be...
CVE-2015-5570
CVE-2015-5570 is a use-after-free vulnerability in Adobe Flash Player (affecting pre-18.0.0.241 and 19.x before 19.0.0.185) and Adobe AIR before 19.0.0.190, enabling remote code execution via specially crafted SWF handling. Adobe APSB15-23 patches are referenced; apply fixed builds to remediate.
CVE-2015-5574
CVE-2015-5574 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS; prior to 11.2.202.521 on Linux; AIR before 19.0.0.190 (and AIR SDK before/SDK & Compi...
CVE-2015-8069
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2015-8442
Technical details about CVE-2015-8442 are not publicly provided in the connected documents. Monitor for updates from official advisories to obtain affected products, vulnerable components, and remediation information.
CVE-2015-8636
CVE-2015-8636 affects Adobe Flash Player and related AIR components. The vulnerability is described as a memory corruption issue that could allow an attacker to execute arbitrary code or cause a denial of service via unspecified vectors, affecting Windows, OS X, and Linux builds (Flash Player pri...
CVE-2015-8642
Technical details about CVE-2015-8642 are not publicly provided in the connected EUVD entries. No concrete information on affected products, root cause, or remediation is present here. Monitor for updates as new details may be released.
CVE-2015-8657
Technical details for CVE-2015-8657 are not publicly available in the provided connected documents; no specific affected products, root cause, or remediation are disclosed here; monitor for updates.
CVE-2015-8820
CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...
CVE-2016-1011
CVE-2016-1011 is a use-after-free vulnerability in Adobe Flash Player affecting the LoadVars.decode path. Affected are Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/macOS, and before 11.2.202.616 on Linux. Successful exploitation could allow arbitrary code exec...
CVE-2016-1013
CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...
CVE-2016-4124
The CVE-2016-4124 entry refers to multiple vulnerabilities in Adobe Flash Player (11.x era) affecting the Flash runtime used by browsers (e.g., in Internet Explorer and Edge) with various CVEs listed in the 2016-4122…4171 range. Connected advisories show remediation via updates to Flash Player 11...
CVE-2016-4134
CVE-2016-4134 is an Adobe Flash Player vulnerability that was addressed as part of the APSB16-18 bulletin. Several connected advisories indicate the fix was delivered by upgrading Flash Player to 11.2.202.626 (e.g., SUSE/openSUSE updates, ALT Linux packages, and Red Hat advisories). The provided ...
CVE-2016-4145
CVE-2016-4145 is tied to Adobe Flash Player used in Internet Explorer 10/11 and Edge. The connected sources show this CVE as part of a broader set of Flash vulnerabilities (CVE-2016-4122 through CVE-2016-4148) patched by Adobe in APSB16-18, with open-source advisories from SUSE/OpenSUSE and Red H...