CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...

CVE-2014-0542

Technical details about CVE-2014-0542 are not publicly available in the provided documents; the connected EUVD entries and advisories mention related issues but do not disclose affected products, root causes, or fixes. Monitor for updates.

CVE-2014-0549

CVE-2014-0549 affects Adobe Flash Player and related AIR components. The vulnerability is a memory corruption issue that could allow remote code execution or a denial of service, triggered via unspecified vectors. Affected versions include Flash Player before 13.0.0.244 and 14.x up to 15.x before...

CVE-2014-0587

Adobe Flash Player vulnerability CVE-2014-0587 is a memory-corruption issue affecting Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows/OS X and Linux before 11.2.202.425. The CVE entry states that an attacker could execute arbitrary code or cause a denial of servi...

CVE-2014-0590

CVE-2014-0590 is a type-confusion vulnerability in Adobe Flash Player that could allow remote code execution via a specially crafted SWF file. According to the provided documents, affected versions include Flash Player before 13.0.0.252 and 14.x, and before 15.0.0.223 on Windows and OS X, plus be...

CVE-2015-0301

CVE-2015-0301 concerns Adobe Flash Player and Flash plugin file validation. Affected: Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/macOS; Flash Player before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Windows/macOS; plus AIR SDKs before 16.0.0.272. De...

CVE-2015-0327

CVE-2015-0327 is a vulnerability in Adobe Flash/AS3 where redefining a Proxy object via ECMAScript redefinition can cause an overflow when enumerating value properties during a stringify operation. Project Zero notes this is a type and memory-usage bug within the AVM/ECMAScript engine that can le...

CVE-2015-0335

CVE-2015-0335 is a memory corruption vulnerability in Adobe Flash Player. The issue arises from parsing crafted SWF/MP4 content, enabling remote code execution or memory corruption on Windows/macOS/Linux. Affected versions include Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.1...

CVE-2015-3077

Summary (CVE-2015-3077) : A type-confusion bug in Adobe Flash Player’s Button/ MovieClip filter setters allowed an attacker to overwrite a filter constructor, causing the native filter object to be backed by a differently-typed object. This enables manipulation of internal filter data via object ...

CVE-2015-3079

CVE-2015-3079 affects Adobe Flash Player and related AIR components. The issue is a cross-domain policy bypass that can lead to information disclosure by bypassing intended access restrictions via unspecified vectors; a sandbox/policy bypass vulnerability was demonstrated in browser contexts usin...

CVE-2015-5118

CVE-2015-5118 is a heap-based buffer overflow in Adobe Flash Player (Windows/OS X: prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: prior to 11.2.202.481), Adobe AIR before 18.0.0.180, and AIR SDK/Compiler before 18.0.0.180, enabling arbitrary code execution via unspecified vecto...

CVE-2015-5548

CVE-2015-5548 affects Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and AIR SDK/Compiler prior to 18.0.0.199. The vulnerability allows attackers to execute arbitrary code or cause a memory corruption-induced denial of serv...

CVE-2015-5556

CVE-2015-5556 describes a use-after-free in Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 on Linux, and in Adobe AIR before 18.0.0.199 (and AIR SDK/SDK Compiler before 18.0.0.199) that may allow arbitrary code execution via unspecified vectors. It is stated to be a ...

CVE-2015-6678

CVE-2015-6676 affects Adobe Flash Player and AIR components. The vulnerability is a buffer overflow in Flash Player before 18.0.0.241 and in the 19.x line before 19.0.0.185 (Windows/OS X) and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Th...

CVE-2015-7634

Adobe Flash Player/Air memory corruption vulnerabilities (CVE-2015-7625, -7626, -7627, -7630, -7633, -7634) were publicly disclosed in 2015. The connected documents describe multiple CVEs tied to memory corruption while parsing specially crafted SWF content, enabling remote code execution or deni...

CVE-2015-8043

Technical details about CVE-2015-8043 (affected software, root cause, impact, or exploit status) are not provided in the connected documents; monitor for updates.

CVE-2015-8067

Technical details about CVE-2015-8067 are not publicly available in the provided documents; no affected products, impact, or remediation details are present here. Monitor for updates.

CVE-2015-8427

Technical details for CVE-2015-8427 are not publicly provided in the supplied documents; the connected EUVD entries reference malware context but do not reveal affected products, versions, vulnerabilities, or fixes. Monitor for updates from official advisories.

CVE-2015-8640

CVE-2015-8640 is a use-after-free vulnerability affecting Adobe Flash Player (Windows/OS X: before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR (before 20.0.0.233; AIR SDK before 20.0.0.233; AIR SDK & Compiler before 20.0.0.233). The description indicates arbitr...

CVE-2015-8642

Technical details about CVE-2015-8642 are not publicly provided in the connected EUVD entries. No concrete information on affected products, root cause, or remediation is present here. Monitor for updates as new details may be released.

CVE-2016-0967

Technical details are not publicly available in the provided documents for CVE-2016-0967; connected EUVD entries only note malware in sbrugna without linking to specific root cause, affected products, or fixes. Monitor for updates.

CVE-2016-0986

Technical details for CVE-2016-0986 are not publicly available in the provided connected documents; no concrete affected products, vulnerable components, or remediation specifics are present. Monitor for updates.

CVE-2016-0999

CVE-2016-0999 is a use-after-free in Adobe Flash Player (Windows/OS X: before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR before 21.0.0.176, enabling arbitrary code execution via unspecified vectors. A remote code execution bug tied to a crafted SWF...

CVE-2016-1013

CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...

CVE-2016-1018

CVE-2016-1018 is a stack-based buffer overflow in Adobe Flash Player that can allow arbitrary code execution when processing crafted JPEG-XR data. Affected are Flash Player on Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The underly...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-4124

The CVE-2016-4124 entry refers to multiple vulnerabilities in Adobe Flash Player (11.x era) affecting the Flash runtime used by browsers (e.g., in Internet Explorer and Edge) with various CVEs listed in the 2016-4122…4171 range. Connected advisories show remediation via updates to Flash Player 11...

CVE-2016-4132

CVE-2016-4132 corresponds to an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries in IE10/IE11 and Edge, with unknown impact in the initial entry but later connected advisories list multiple memory corruption/code-execution related CVEs. Connected...

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4224

CVE-2016-4224 affects Adobe Flash Player prior to 18.0.0.366 (Windows/OS X) and earlier 22.x versions before 22.0.0.209, and Linux before 11.2.202.632. Connected advisories describe a memory corruption issue in Flash Player when parsing a specially crafted SWF file, exploitable remotely by entici...

CVE-2016-4225

CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...

CVE-2016-4277

Adobe Flash Player vulnerable versions before 18.0.0.375 and 19.x up to 23.x before 23.0.0.162 on Windows/macOS, and before 11.2.202.635 on Linux, allow bypassing access restrictions to obtain sensitive information via unspecified vectors. Root cause not explicitly detailed in the provided docume...

CVE-2016-7864

CVE-2016-7864 is a use-after-free vulnerability in Adobe Flash Player affecting Flash Player 23.0.0.205 and earlier, and 11.2.202.643 and earlier. Exploitation could lead to arbitrary code execution. Connected advisories confirm affected variants and document patches: Mageia/GLSA notes for Flash ...

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2016-7877

CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...

CVE-2017-3062

Adobe Flash Player: CVE-2017-3062 is a use-after-free vulnerability in ActionScript2 when creating a getter/setter property, affecting Flash Player 25.0.0.127 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is caused by a memory-management flaw in the affect...

CVE-2018-4919

CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2010-2161

CVE-2010-2161 describes an array index error in Adobe Flash Player (before 9.0.277.0 and in 10.x before 10.1.53.64) and Adobe AIR before 2.0.2.12610 that could allow arbitrary code execution via unspecified Flash content. Affected software includes Flash Player and AIR; root cause per the descrip...

CVE-2010-2173

CVE-2010-2173 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR before 2.0.2.12610, with arbitrary code execution reported via unspecified vectors. The description notes an “invalid pointer vulnerability” related to the newclass (0x58) operator...

CVE-2010-2176

Technical details about CVE-2010-2176 are not publicly available in the provided documents. The connected EUVD entries mention malware context but do not specify affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2011-2428

Adobe Flash Player before 10.3.183.10 on Windows/macOS/Linux/Solaris and before 10.3.186.7 on Android is affected by a logic‑error issue that can cause a browser crash and may lead to arbitrary code execution. The CVE‑2011‑2428 entry is referenced in multiple advisories (e.g., RHSA‑2011:1333, RHS...

CVE-2011-2452

CVE-2011-2452 is a Flash Player/Adobe AIR vulnerability family affecting multiple platforms (Windows, macOS, Linux, Solaris, Android) with memory corruption that could allow arbitrary code execution or memory corruption-based DoS. The issue is part of a broader set of Adobe Flash Player vulnerabi...

CVE-2011-2454

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...

CVE-2013-1365

No connected documents provide concrete technical details for CVE-2013-1365 beyond the initial description. Technical specifics (affected products/versions, root cause, exploitability) are not publicly disclosed here. Monitor for updates and new disclosures.

CVE-2013-2728

CVE-2013-2728 concerns Adobe Flash Player (and AIR) with a memory-corruption based vulnerability that could allow arbitrary code execution or a denial of service via unspecified vectors. The initial description lists affected versions: Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 ...

CVE-2014-0538

CVE-2014-0538 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that could allow arbitrary code execution. According to the initial entry, it affects Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and macOS, and before 11.2.202.400 on Linux...

CVE-2014-0578

CVE-2014-0578 affects Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux, plus Adobe AIR before 18.0.0.180 and related SDKs. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vecto...

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...