CVE-2007-6637

CVE-2007-6637 is a cross-site scripting (XSS) vulnerability in Adobe Flash Player triggered by crafted SWF files, enabling remote script/HTML execution via SWF parameters. The issue is discussed alongside related CVEs (e.g., CVE-2007-6244) and is reflected in Red Hat advisories for Flash Player, ...

CVE-2009-1868

CVE-2009-1868 describes a heap-based buffer overflow in Adobe Flash Player (before 9.0.246.0 and in 10.x before 10.0.32.18) and Adobe AIR (before 1.5.2) that can allow a denial of service or possibly arbitrary code execution via unspecified vectors involving URL parsing. Connected advisories note...

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2011-2136

CVE-2011-2136 is an Adobe Flash Player and Adobe AIR vulnerability described as an integer overflow that could allow remote code execution. Affected products include Flash Player prior to 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player prior to 10.3.186.3 on Android; and AIR before...

CVE-2011-2428

Adobe Flash Player before 10.3.183.10 on Windows/macOS/Linux/Solaris and before 10.3.186.7 on Android is affected by a logic‑error issue that can cause a browser crash and may lead to arbitrary code execution. The CVE‑2011‑2428 entry is referenced in multiple advisories (e.g., RHSA‑2011:1333, RHS...

CVE-2013-0630

CVE-2013-0630 relates to a buffer overflow in Adobe Flash Player (and Adobe AIR) that could allow arbitrary code execution. The provided Connected documents indicate affected products include Flash Player with platform variants (Windows, Mac OS X, Linux, Android) and Adobe AIR. The OpenVAS/Nessus...

CVE-2014-0578

CVE-2014-0578 affects Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux, plus Adobe AIR before 18.0.0.180 and related SDKs. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vecto...

CVE-2015-3079

CVE-2015-3079 affects Adobe Flash Player and related AIR components. The issue is a cross-domain policy bypass that can lead to information disclosure by bypassing intended access restrictions via unspecified vectors; a sandbox/policy bypass vulnerability was demonstrated in browser contexts usin...

CVE-2015-3106

Adobe Flash Player contains a use-after-free vulnerability (CVE-2015-3106) that allows arbitrary code execution via unspecified vectors. Affected products include Flash Player before 13.0.0.292 and 14.x up to 18.x before 18.0.0.160 on Windows/macOS, and before 11.2.202.466 on Linux; Adobe AIR bef...

CVE-2015-5574

CVE-2015-5574 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS; prior to 11.2.202.521 on Linux; AIR before 19.0.0.190 (and AIR SDK before/SDK & Compi...

CVE-2015-6678

CVE-2015-6676 affects Adobe Flash Player and AIR components. The vulnerability is a buffer overflow in Flash Player before 18.0.0.241 and in the 19.x line before 19.0.0.185 (Windows/OS X) and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Th...

CVE-2015-7630

CVE-2015-7630 is aFlash-related memory corruption/remote code execution vulnerability reported across Adobe Flash Player (Windows, OS X), Linux, and Adobe AIR/AIR SDKs. The connected sources describe the root cause as a memory corruption issue triggered during SWF handling/parsing, with the vulne...

CVE-2015-7634

Adobe Flash Player/Air memory corruption vulnerabilities (CVE-2015-7625, -7626, -7627, -7630, -7633, -7634) were publicly disclosed in 2015. The connected documents describe multiple CVEs tied to memory corruption while parsing specially crafted SWF content, enabling remote code execution or deni...

CVE-2015-8043

Technical details about CVE-2015-8043 (affected software, root cause, impact, or exploit status) are not provided in the connected documents; monitor for updates.

CVE-2015-8067

Technical details about CVE-2015-8067 are not publicly available in the provided documents; no affected products, impact, or remediation details are present here. Monitor for updates.

CVE-2015-8405

Technical details about CVE-2015-8405 are not publicly provided in the supplied Connected documents. Monitor for updates; the initial description lists affected products/versions but no further exploit/impact specifics are given.

CVE-2015-8407

CVE-2015-8407 is a heap buffer overflow in Adobe Flash Player before 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before that version). The vulnerability allows attackers to execute arbitrary...

CVE-2015-8427

Technical details for CVE-2015-8427 are not publicly provided in the supplied documents; the connected EUVD entries reference malware context but do not reveal affected products, versions, vulnerabilities, or fixes. Monitor for updates from official advisories.

CVE-2015-8442

Technical details about CVE-2015-8442 are not publicly provided in the connected documents. Monitor for updates from official advisories to obtain affected products, vulnerable components, and remediation information.

CVE-2015-8640

CVE-2015-8640 is a use-after-free vulnerability affecting Adobe Flash Player (Windows/OS X: before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR (before 20.0.0.233; AIR SDK before 20.0.0.233; AIR SDK & Compiler before 20.0.0.233). The description indicates arbitr...

CVE-2015-8644

CVE-2015-8644 targets Adobe Flash Player and AIR components. A type confusion vulnerability in Flash Player (Windows/macOS: before 18.0.0.324, 19.x and 20.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR before 20.0.0.233 could lead to arbitrary code execution. Some advisories note e...

CVE-2016-0967

Technical details are not publicly available in the provided documents for CVE-2016-0967; connected EUVD entries only note malware in sbrugna without linking to specific root cause, affected products, or fixes. Monitor for updates.

CVE-2016-1014

CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-4124

The CVE-2016-4124 entry refers to multiple vulnerabilities in Adobe Flash Player (11.x era) affecting the Flash runtime used by browsers (e.g., in Internet Explorer and Edge) with various CVEs listed in the 2016-4122…4171 range. Connected advisories show remediation via updates to Flash Player 11...

CVE-2016-4129

CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...

CVE-2016-4136

CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...

CVE-2016-4174

No concrete technical details about CVE-2016-4174 are provided in the connected documents. The EUVD entries refer to malware in sbrugna but do not specify affected product/version/root cause for this CVE. Monitor for updates.

CVE-2016-4223

Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...

CVE-2016-6983

Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.

CVE-2016-6984

CVE-2016-6984 refers to memory corruption in Adobe Flash Player affecting multiple versions prior to 18.0.0.382 and 19.x up to 23.x before 23.0.0.185 on Windows/macOS, and Linux before 11.2.202.637. The vulnerability could allow arbitrary code execution or a denial of service via unspecified vect...

CVE-2010-2161

CVE-2010-2161 describes an array index error in Adobe Flash Player (before 9.0.277.0 and in 10.x before 10.1.53.64) and Adobe AIR before 2.0.2.12610 that could allow arbitrary code execution via unspecified Flash content. Affected software includes Flash Player and AIR; root cause per the descrip...

CVE-2011-0621

CVE-2011-0621 concerns Adobe Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability permits attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors, and is described as ...

CVE-2011-0623

CVE-2011-0623 affects Adobe Flash Player prior to 10.3.181.14 on Windows/macOS/Linux/Solaris and prior to 10.3.185.21 on Android. The vulnerability is described as a bounds-checking issue that enables arbitrary code execution. The connected documents reference the affected versions and patch leve...

CVE-2011-2138

CVE-2011-2138 refers to an integer overflow in Adobe Flash Player (and associated AIR) that could allow code execution. Affected product scope includes Flash Player on Windows, macOS, Linux, Solaris (pre-10.3.183.5), and Android (pre-10.3.186.3), plus Adobe AIR on Windows/macOS (pre-2.7.1) and An...

CVE-2014-0549

CVE-2014-0549 affects Adobe Flash Player and related AIR components. The vulnerability is a memory corruption issue that could allow remote code execution or a denial of service, triggered via unspecified vectors. Affected versions include Flash Player before 13.0.0.244 and 14.x up to 15.x before...

CVE-2015-0301

CVE-2015-0301 concerns Adobe Flash Player and Flash plugin file validation. Affected: Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/macOS; Flash Player before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Windows/macOS; plus AIR SDKs before 16.0.0.272. De...

CVE-2015-0326

Adobe Flash Player contains a NULL pointer dereference vulnerability (CVE-2015-0326) that affects Windows and macOS builds prior to 16.0.0.305 and Linux prior to 11.2.202.442. OpenSUSE/Nessus entries corroborate NULL pointer dereference variants in the 0325–0328 group, including 0326, with fixes ...

CVE-2015-4429

Adobe Flash Player (Windows, OS X, Linux) and related AIR components are affected by CVE-2015-4429, a NULL pointer dereference vulnerability. The issue arises when parsing crafted SWF/FLV content, potentially enabling denial of service and other unspecified impact. Affected versions included Flas...

CVE-2015-4432

CVE-2015-4432 is a heap-based buffer overflow in Adobe Flash Player (before 13.0.0.302 and before 18.0.0.203 for 14.x–18.x) on Windows, OS X, and before 11.2.202.481 on Linux, and in Adobe AIR/AIR SDK before 18.0.0.180. The vulnerability allows attackers to execute arbitrary code via unspecified ...

CVE-2015-5118

CVE-2015-5118 is a heap-based buffer overflow in Adobe Flash Player (Windows/OS X: prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: prior to 11.2.202.481), Adobe AIR before 18.0.0.180, and AIR SDK/Compiler before 18.0.0.180, enabling arbitrary code execution via unspecified vecto...

CVE-2015-5556

CVE-2015-5556 describes a use-after-free in Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 on Linux, and in Adobe AIR before 18.0.0.199 (and AIR SDK/SDK Compiler before 18.0.0.199) that may allow arbitrary code execution via unspecified vectors. It is stated to be a ...

CVE-2015-5579

The CVE-2015-5579 entry concerns Adobe Flash Player and related AIR components. Affected components include Flash Player on Windows/OS X (before 18.0.0.241 and 19.x before 19.0.0.185) and Linux (before 11.2.202.521), Adobe AIR before 19.0.0.190, and the AIR SDK and AIR SDK & Compiler before 19.0....

CVE-2015-7631

CVE-2015-7631 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. It allows attackers to execute arbitrary code via a TextLine object with a crafted validity property. Affected: Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; Flash Player...

CVE-2015-8070

Technical details about CVE-2015-8070 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8401

Technical details for CVE-2015-8401 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8433

Technical details for CVE-2015-8433 are not publicly provided in the supplied documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-8434

Technical details for CVE-2015-8434 are not publicly provided in the supplied documents. Monitor for updates; connected EUVD entries mention malware but do not specify affected products, versions, or fixes.