CVE-2014-9162

CVE-2014-9162 affects Adobe Flash Player prior to 13.0.0.259 and, for 14.x through 16.x, prior to 16.0.0.235 on Windows/macOS, and prior to 11.2.202.425 on Linux. The vulnerability, described as an information-disclosure issue, could allow a remote attacker to obtain sensitive information via uns...

CVE-2015-0326

Adobe Flash Player contains a NULL pointer dereference vulnerability (CVE-2015-0326) that affects Windows and macOS builds prior to 16.0.0.305 and Linux prior to 11.2.202.442. OpenSUSE/Nessus entries corroborate NULL pointer dereference variants in the 0325–0328 group, including 0326, with fixes ...

CVE-2015-3123

CVE-2015-3123 affects Adobe Flash Player (Windows/OS X: <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and Adobe AIR (<18.0.0.180, AIR SDK/SDK & Compiler

CVE-2015-4428

Technical details for CVE-2015-4428 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8401

Technical details for CVE-2015-8401 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8433

Technical details for CVE-2015-8433 are not publicly provided in the supplied documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-8434

Technical details for CVE-2015-8434 are not publicly provided in the supplied documents. Monitor for updates; connected EUVD entries mention malware but do not specify affected products, versions, or fixes.

CVE-2015-8437

Technical details for CVE-2015-8437 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8447

CVE-2015-8447 describes a use-after-free vulnerability in the Color object implementation of Adobe Flash Player. The flaw enables attackers to execute arbitrary code via crafted setTransform arguments. Affected products include Flash Player before 18.0.0.268 and 19.x up to 19.x before 20.0.0.228 ...

CVE-2016-0994

The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...

CVE-2016-0997

CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...

CVE-2016-1014

CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2016-4129

CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...

CVE-2016-4130

CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...

CVE-2016-4143

CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...

CVE-2016-4162

Technical details for CVE-2016-4162 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2016-4237

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3060

Adobe Flash Player, versions 25.0.0.127 and earlier, contains a memory corruption vulnerability in the ActionScript2 parser that could lead to arbitrary code execution. Evidence across multiple connected advisories indicates updating to 25.0.0.148 mitigates the issue (APS B17-10) and patches CVE-...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2018-4937

CVE-2018-4937 affects Adobe Flash Player prior to 29.0.0.140 (APSB18-08). The issue is an exploitable out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Affected versions include 29.0.0.113 and earlier; remediation is upgrading to 29.0.0.140 or new...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2009-3798

CVE-2009-3798 is part of multiple memory‑corruption flaws in Adobe Flash Player/Flash-plugin as of 2009. Connected advisories indicate this vulnerability (among others) was addressed by updating Flash Player to version 10.0.42.34, with Red Hat advisories RHSA-2009:1657/1658 recommending this upgr...

CVE-2010-2164

CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...

CVE-2010-2186

Technical details (affected product/version, root cause, impact, or patch) are not provided in the connected documents for CVE-2010-2186. Monitor for updates.

CVE-2011-0559

Technical details for CVE-2011-0559 are not present in the provided connected documents. Public information on affected components, root cause, and fixes is not available here; monitor for updates.

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2011-2459

CVE-2011-2459 affects Adobe Flash Player and Adobe AIR as summarized in the initial entry. The vulnerability is described as a memory corruption issue that could enable remote code execution or cause a denial of service via unspecified vectors (notably separate from several related CVEs). Affecte...

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...

CVE-2012-5277

Adobe Flash Player and Adobe AIR contain a buffer overflow vulnerability (CVE-2012-5277) that allows arbitrary code execution via unspecified vectors. Affected: Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/macOS; Flash before 10.3.183.43 and 11.x before 11.2.202.251 on ...

CVE-2013-0650

CVE-2013-0650 is a use-after-free vulnerability in Adobe Flash Player (Windows, macOS, Linux) and related AIR components that could allow arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/Mac; before...

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0547

Adobe Flash Player and AIR components are affected by a memory-corruption vulnerability (CVE-2014-0547) that can be triggered by unspecified vectors. Impacted products include Flash Player versions prior to 13.0.0.244 and 14.x/15.x prior to 15.0.0.152 on Windows and OS X, and prior to 11.2.202.40...

CVE-2015-0303

CVE-2015-0303 affects Adobe Flash Player and Adobe AIR as described in APSB15-01. The vulnerability is a memory corruption in Flash Player that could allow remote code execution or a denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to...

CVE-2015-3102

Adobe Flash Player and related runtimes (Windows/macOS: 13.0.0.292 and 14.x–18.x before 18.0.0.160; Linux before 11.2.202.466; AIR before 18.0.0.144 on Windows and before 18.0.0.143 on macOS/Android; AIR SDKs before 18.0.0.144/18.0.0.143) are affected by CVE-2015-3102, which enables remote bypass...

CVE-2015-4432

CVE-2015-4432 is a heap-based buffer overflow in Adobe Flash Player (before 13.0.0.302 and before 18.0.0.203 for 14.x–18.x) on Windows, OS X, and before 11.2.202.481 on Linux, and in Adobe AIR/AIR SDK before 18.0.0.180. The vulnerability allows attackers to execute arbitrary code via unspecified ...

CVE-2015-4433

CVE-2015-4433 describes a type confusion vulnerability in Adobe Flash Player and Adobe AIR that can lead to remote code execution. Affected products include Flash Player on Windows/OS X before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203, Linux Flash Player before 11.2.202.481, and Adobe AIR ...

CVE-2015-5124

Technical details for CVE-2015-5124 are not publicly provided in the connected documents. No specific affected products, vectors, or fixes are described; monitor for updates.

CVE-2015-5541

CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...

CVE-2015-5544

CVE-2015-5544 affects Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199. The description indicates an arbitrary-code execution or memory-corruption vulnerability with unspecified vectors; no concrete exploit details, roo...

CVE-2015-5554

CVE-2015-5554 is a type-confusion vulnerability in Adobe Flash Player that can allow arbitrary code execution. It affects Flash Player on Windows, OS X (and Linux), plus Adobe AIR/AIR SDK prior to 18.0.0.199 (or 18.0.0.199 for AIR components). The exact root cause is described as a type confusion...

CVE-2015-5557

Technical details for CVE-2015-5557 are not provided in the connected documents; they reference related Flash use-after-free CVEs but do not specify this exact vulnerability’s affected products, root cause, or patch.