CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2016-6983

Technical details about CVE-2016-6983 are not publicly provided in the supplied documents; no explicit affected products, versions, or fixes are described. Monitor for updates.

CVE-2016-6990

Technical details for CVE-2016-6990 are not provided in the connected documents. The available sources discuss malware activity generally and do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2016-7864

CVE-2016-7864 is a use-after-free vulnerability in Adobe Flash Player affecting Flash Player 23.0.0.205 and earlier, and 11.2.202.643 and earlier. Exploitation could lead to arbitrary code execution. Connected advisories confirm affected variants and document patches: Mageia/GLSA notes for Flash ...

CVE-2017-2928

Affected software: Adobe Flash Player versions 24.0.0.186 and earlier. Vulnerability: exploitable memory corruption in the JPEG XR/visual mode handling that could enable arbitrary code execution. Impact (as stated): remote code execution on the affected host. Status in connected sources: multiple...

CVE-2010-2173

CVE-2010-2173 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR before 2.0.2.12610, with arbitrary code execution reported via unspecified vectors. The description notes an “invalid pointer vulnerability” related to the newclass (0x58) operator...

CVE-2011-0619

Summary: CVE-2011-0619 affects Adobe Flash Player prior to 10.3.181.14 (Windows/macOS/Linux/Solaris) and prior to 10.3.185.21 (Android). Root cause is memory corruption via unspecified vectors, enabling arbitrary code execution or a denial of service. Impact: arbitrary code execution or memory co...

CVE-2011-0623

CVE-2011-0623 affects Adobe Flash Player prior to 10.3.181.14 on Windows/macOS/Linux/Solaris and prior to 10.3.185.21 on Android. The vulnerability is described as a bounds-checking issue that enables arbitrary code execution. The connected documents reference the affected versions and patch leve...

CVE-2011-2136

CVE-2011-2136 is an Adobe Flash Player and Adobe AIR vulnerability described as an integer overflow that could allow remote code execution. Affected products include Flash Player prior to 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player prior to 10.3.186.3 on Android; and AIR before...

CVE-2011-2138

CVE-2011-2138 refers to an integer overflow in Adobe Flash Player (and associated AIR) that could allow code execution. Affected product scope includes Flash Player on Windows, macOS, Linux, Solaris (pre-10.3.183.5), and Android (pre-10.3.186.3), plus Adobe AIR on Windows/macOS (pre-2.7.1) and An...

CVE-2011-2414

CVE-2011-2414: Buffer overflow in Adobe Flash Player (pre-10.3.183.5 Windows/Mac/Linux/Solaris; pre-10.3.186.3 Android) and Adobe AIR (pre-2.7.1) allowing arbitrary code execution via unspecified vectors. Public references link to Adobe APSB11-21; openSUSE/SUSE patches (flash-player-4976) address...

CVE-2011-2444

Adobe Flash Player is vulnerable to a universal cross-site scripting (XSS) issue affecting versions before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris , and before 10.3.186.7 on Android . A remote attacker can exploit this by tricking a user into visiting a malicious website or clicking ...

CVE-2011-2445

CVE-2011-2445 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors, with m...

CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...

CVE-2013-2728

CVE-2013-2728 concerns Adobe Flash Player (and AIR) with a memory-corruption based vulnerability that could allow arbitrary code execution or a denial of service via unspecified vectors. The initial description lists affected versions: Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 ...

CVE-2014-0542

Technical details about CVE-2014-0542 are not publicly available in the provided documents; the connected EUVD entries and advisories mention related issues but do not disclose affected products, root causes, or fixes. Monitor for updates.

CVE-2014-0549

CVE-2014-0549 affects Adobe Flash Player and related AIR components. The vulnerability is a memory corruption issue that could allow remote code execution or a denial of service, triggered via unspecified vectors. Affected versions include Flash Player before 13.0.0.244 and 14.x up to 15.x before...

CVE-2014-0557

CVE-2014-0557 affects Adobe Flash Player (and related AIR components) across Windows, OS X, Linux, and Android/APIs. The vulnerability arises from improper restriction of memory address discovery, enabling bypass of ASLR via unspecified vectors. The CVSS 2.0 base metrics indicate a high-severity,...

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...

CVE-2015-0301

CVE-2015-0301 concerns Adobe Flash Player and Flash plugin file validation. Affected: Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/macOS; Flash Player before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Windows/macOS; plus AIR SDKs before 16.0.0.272. De...

CVE-2015-0327

CVE-2015-0327 is a vulnerability in Adobe Flash/AS3 where redefining a Proxy object via ECMAScript redefinition can cause an overflow when enumerating value properties during a stringify operation. Project Zero notes this is a type and memory-usage bug within the AVM/ECMAScript engine that can le...

CVE-2015-3124

CVE-2015-3124 is a use-after-free flaw in Adobe Flash Player (pre-13.0.0.302, 14.x up to 18.x before 18.0.0.203 on Windows/OS X and before 11.2.202.481 on Linux), Adobe AIR before 18.0.0.180, and associated AIR SDK/Compiler versions. The vulnerability allows attackers to execute arbitrary code vi...

CVE-2015-5570

CVE-2015-5570 is a use-after-free vulnerability in Adobe Flash Player (affecting pre-18.0.0.241 and 19.x before 19.0.0.185) and Adobe AIR before 19.0.0.190, enabling remote code execution via specially crafted SWF handling. Adobe APSB15-23 patches are referenced; apply fixed builds to remediate.

CVE-2015-5574

CVE-2015-5574 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS; prior to 11.2.202.521 on Linux; AIR before 19.0.0.190 (and AIR SDK before/SDK & Compi...

CVE-2015-8069

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8425

This CVE concerns a use-after-free in Adobe Flash Player (and related AIR components) that allows arbitrary code execution. Affected products/versions include: Flash Player before 18.0.0.268 and 19.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204...

CVE-2015-8431

Technical details for CVE-2015-8431 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-8449

CVE-2015-8449 describes a use-after-free in the MovieClip implementation of Adobe Flash Player, affecting versions prior to 18.0.0.268 and multiple 19.x/20.x releases, on Windows/macOS, and prior Linux release 11.2.202.554, as well as Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Compiler before...

CVE-2015-8640

CVE-2015-8640 is a use-after-free vulnerability affecting Adobe Flash Player (Windows/OS X: before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR (before 20.0.0.233; AIR SDK before 20.0.0.233; AIR SDK & Compiler before 20.0.0.233). The description indicates arbitr...

CVE-2016-0994

The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...

CVE-2016-1013

CVE-2016-1013 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and Linux (before 11.2.202.616) that allows arbitrary code execution via unspecified vectors. The entry notes this is a distinct issue from CVE...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4188

Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.

CVE-2016-4223

Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...

CVE-2016-4282

Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-7877

CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2017-3114

CVE-2017-3114 affects Adobe Flash Player before 27.0.0.187. The issue arises from an invalid (out-of-range) pointer offset during access of internal data structure fields, causing an out-of-bounds read/write in a computation used for language/region functionality. This vulnerability can enable ar...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2009-1868

CVE-2009-1868 describes a heap-based buffer overflow in Adobe Flash Player (before 9.0.246.0 and in 10.x before 10.0.32.18) and Adobe AIR (before 1.5.2) that can allow a denial of service or possibly arbitrary code execution via unspecified vectors involving URL parsing. Connected advisories note...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2011-0560

Technical details for CVE-2011-0560 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2013-0630

CVE-2013-0630 relates to a buffer overflow in Adobe Flash Player (and Adobe AIR) that could allow arbitrary code execution. The provided Connected documents indicate affected products include Flash Player with platform variants (Windows, Mac OS X, Linux, Android) and Adobe AIR. The OpenVAS/Nessus...