CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8434

Technical details for CVE-2015-8434 are not publicly provided in the supplied documents. Monitor for updates; connected EUVD entries mention malware but do not specify affected products, versions, or fixes.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2015-8447

CVE-2015-8447 describes a use-after-free vulnerability in the Color object implementation of Adobe Flash Player. The flaw enables attackers to execute arbitrary code via crafted setTransform arguments. Affected products include Flash Player before 18.0.0.268 and 19.x up to 19.x before 20.0.0.228 ...

CVE-2016-0994

The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...

CVE-2016-1001

Adobe Flash Player and AIR (including AIR SDK variants) are affected by a heap-based buffer overflow (CVE-2016-1001) that could allow arbitrary code execution. Affected are Flash Player prior to 18.0.0.333 and 19.x–21.x prior to 21.0.0.182 on Windows/OS X, and prior to 11.2.202.577 on Linux; AIR ...

CVE-2016-4140

CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4224

CVE-2016-4224 affects Adobe Flash Player prior to 18.0.0.366 (Windows/OS X) and earlier 22.x versions before 22.0.0.209, and Linux before 11.2.202.632. Connected advisories describe a memory corruption issue in Flash Player when parsing a specially crafted SWF file, exploitable remotely by entici...

CVE-2016-4281

Technical details about CVE-2016-4281 are not provided in the supplied documents. Connected EUVD records mention malware “sbrugna” without vulnerability specifics. Monitor for updates from ENISA advisories and related sources.

CVE-2016-6990

Technical details for CVE-2016-6990 are not provided in the connected documents. The available sources discuss malware activity generally and do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2016-7864

CVE-2016-7864 is a use-after-free vulnerability in Adobe Flash Player affecting Flash Player 23.0.0.205 and earlier, and 11.2.202.643 and earlier. Exploitation could lead to arbitrary code execution. Connected advisories confirm affected variants and document patches: Mageia/GLSA notes for Flash ...

CVE-2016-7890

CVE-2016-7890 affects Adobe Flash Player versions 23.0.0.207 and earlier, and 11.2.202.644 and earlier, describing a security bypass in the implementation of the same-origin policy. Connected advisories show this CVE being addressed in various Linux package updates: e.g., openSUSE openSUSE-2016-1...

CVE-2017-3062

Adobe Flash Player: CVE-2017-3062 is a use-after-free vulnerability in ActionScript2 when creating a getter/setter property, affecting Flash Player 25.0.0.127 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is caused by a memory-management flaw in the affect...

CVE-2017-3064

CVE-2017-3064 affects Adobe Flash Player (browser plug-in) up to version 25.0.0.127, with a memory corruption vulnerability triggered while parsing a shape outline that can lead to arbitrary code execution. The issue is confirmed in multiple CVE aggregations tied to APSB17-10; advisories note upg...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2007-0071

Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) are affected by CVE-2007-0071 due to an integer overflow triggered by a crafted SWF with a negative Scene Count value. The overflow occurs when a signed comparison is passed and the value is used as an offset of a NULL pointer, l...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2010-2167

CVE-2010-2167 is a vulnerability in Adobe Flash Player (before 9.0.277.0 and 10.x before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) where heap-based overflows in GIF/JPEG data could lead to arbitrary code execution. The initial description specifies the vectors as malformed GIF/JPEG data, wit...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2011-0560

Technical details for CVE-2011-0560 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...

CVE-2013-0650

CVE-2013-0650 is a use-after-free vulnerability in Adobe Flash Player (Windows, macOS, Linux) and related AIR components that could allow arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/Mac; before...

CVE-2013-1375

CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...

CVE-2014-0542

Technical details about CVE-2014-0542 are not publicly available in the provided documents; the connected EUVD entries and advisories mention related issues but do not disclose affected products, root causes, or fixes. Monitor for updates.

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...

CVE-2015-3122

CVE-2015-3122 is a type confusion vulnerability in Adobe Flash Player and related Adobe AIR components. Affected products include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 an...

CVE-2015-3126

CVE-2015-3126 is an Adobe Flash Player issue (APSB15-16) described in connected advisories as a NULL pointer dereference. The vulnerability contributes to denial of service and possible other impacts; it’s part of a set of Flash vulnerabilities addressed in SUSE advisories and other sources. Affe...

CVE-2015-4428

Technical details for CVE-2015-4428 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5554

CVE-2015-5554 is a type-confusion vulnerability in Adobe Flash Player that can allow arbitrary code execution. It affects Flash Player on Windows, OS X (and Linux), plus Adobe AIR/AIR SDK prior to 18.0.0.199 (or 18.0.0.199 for AIR components). The exact root cause is described as a type confusion...

CVE-2015-5565

Technical details for CVE-2015-5565 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-5588

Technical details about CVE-2015-5588 are not publicly provided in the connected documents. No affected product/version/impact is specified here. Monitor for updates in the EUVD advisories and official vendor bulletins.

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-7625

CVE-2015-7625 concerns memory corruption/remote code execution in Adobe Flash Player (and related AIR components) via specially crafted SWF content. Public documentation confirms: Flash Player vulnerable on Windows and OS X older builds (before 18.0.0.252 and 19.x before 19.0.0.207), Linux before...

CVE-2015-7659

Adobe Flash Player and related AIR components are affected by CVE-2015-7659 due to a type confusion in the NetConnection object implementation. Vulnerable: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS); Linux: before 11.2.202.548; AIR before 19.0.0.241; AIR SDK before ...

CVE-2015-8047

Technical details about CVE-2015-8047 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8437

Technical details for CVE-2015-8437 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0981

Technical details for CVE-2016-0981 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2016-0989

Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...

CVE-2016-0997

CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...

CVE-2016-1018

CVE-2016-1018 is a stack-based buffer overflow in Adobe Flash Player that can allow arbitrary code execution when processing crafted JPEG-XR data. Affected are Flash Player on Windows/macOS (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The underly...

CVE-2016-1024

Technical details for CVE-2016-1024 are not provided in the connected documents. The initial CVE description lists a Flash vulnerability with unspecified vectors; no product/version/root cause/fix details are supplied here. Monitor for updates.

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-4122

CVE-2016-4122 concerns Adobe Flash Player/Flash plugin. Connected advisories cite multiple vendors (openSUSE/SUSE, Red Hat, ALT Linux, arch linux) reporting this CVE along with related ones (4123–4129, 4130–4132, 4133–4137, 4138–4148, 4150–4171). The vulnerability set includes memory corruption, ...

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4162

Technical details for CVE-2016-4162 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2016-4185

Technical details for CVE-2016-4185 are not publicly provided in the supplied documents. Monitor for updates as connected EUVD entries reference malware but do not reveal product/version/impact specifics here.

CVE-2016-4277

Adobe Flash Player vulnerable versions before 18.0.0.375 and 19.x up to 23.x before 23.0.0.162 on Windows/macOS, and before 11.2.202.635 on Linux, allow bypassing access restrictions to obtain sensitive information via unspecified vectors. Root cause not explicitly detailed in the provided docume...