CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3077

CVE-2017-3077 affects Adobe Flash Player PNG image parser. The vulnerability is a memory corruption issue that could lead to arbitrary code execution when exploited against vulnerable builds (Flash Player 25.0.0.171 and earlier). Public exploitation evidence exists (Exploit-DB entry; CIRCL sighti...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2018-4919

CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...

CVE-2010-2164

CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2010-2173

CVE-2010-2173 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR before 2.0.2.12610, with arbitrary code execution reported via unspecified vectors. The description notes an “invalid pointer vulnerability” related to the newclass (0x58) operator...

CVE-2010-2185

CVE-2010-2185 is a buffer overflow vulnerability in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, as well as in Adobe AIR prior to 2.0.2.12610, that could allow remote arbitrary code execution via unspecified vectors. Publicly noted affected products/versions inc...

CVE-2010-2186

Technical details (affected product/version, root cause, impact, or patch) are not provided in the connected documents for CVE-2010-2186. Monitor for updates.

CVE-2011-0622

Adobe Flash Player vulnerability CVE-2011-0622 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue allows arbitrary code execution or memory corruption via unspecified vectors. The description does not specify exact vulnerabl...

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0547

Adobe Flash Player and AIR components are affected by a memory-corruption vulnerability (CVE-2014-0547) that can be triggered by unspecified vectors. Impacted products include Flash Player versions prior to 13.0.0.244 and 14.x/15.x prior to 15.0.0.152 on Windows and OS X, and prior to 11.2.202.40...

CVE-2014-0549

CVE-2014-0549 affects Adobe Flash Player and related AIR components. The vulnerability is a memory corruption issue that could allow remote code execution or a denial of service, triggered via unspecified vectors. Affected versions include Flash Player before 13.0.0.244 and 14.x up to 15.x before...

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2014-0580

CVE-2014-0580 affects Adobe Flash Player prior to 13.0.0.259 and 14.x up to 16.x before 16.0.0.235 on Windows/OS X, and prior to 11.2.202.425 on Linux. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors. The available connected sources identify upda...

CVE-2015-3123

CVE-2015-3123 affects Adobe Flash Player (Windows/OS X: <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and Adobe AIR (<18.0.0.180, AIR SDK/SDK & Compiler

CVE-2015-5540

CVE-2015-5540 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR/AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. It is described as a different issue from CVE-2015-5127, CVE-2...

CVE-2015-5554

CVE-2015-5554 is a type-confusion vulnerability in Adobe Flash Player that can allow arbitrary code execution. It affects Flash Player on Windows, OS X (and Linux), plus Adobe AIR/AIR SDK prior to 18.0.0.199 (or 18.0.0.199 for AIR components). The exact root cause is described as a type confusion...

CVE-2015-5572

Adobe Flash Player and related Adobe AIR components are affected by CVE-2015-5572, a security bypass that allows information disclosure by bypassing intended access restrictions. The vulnerability affects Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11...

CVE-2015-5574

CVE-2015-5574 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS; prior to 11.2.202.521 on Linux; AIR before 19.0.0.190 (and AIR SDK before/SDK & Compi...

CVE-2015-7630

CVE-2015-7630 is aFlash-related memory corruption/remote code execution vulnerability reported across Adobe Flash Player (Windows, OS X), Linux, and Adobe AIR/AIR SDKs. The connected sources describe the root cause as a memory corruption issue triggered during SWF handling/parsing, with the vulne...

CVE-2015-7659

Adobe Flash Player and related AIR components are affected by CVE-2015-7659 due to a type confusion in the NetConnection object implementation. Vulnerable: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS); Linux: before 11.2.202.548; AIR before 19.0.0.241; AIR SDK before ...

CVE-2015-8047

Technical details about CVE-2015-8047 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8410

The vulnerability CVE-2015-8410 is a use-after-free issue in Adobe Flash Player (Windows, OS X before 18.0.0.268 and 19.x; 20.x before 20.0.0.228) and Linux before 11.2.202.554, plus Adobe AIR before 20.0.0.204 (and related AIR SDK packages) that allows arbitrary code execution via unspecified ve...

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2015-8449

CVE-2015-8449 describes a use-after-free in the MovieClip implementation of Adobe Flash Player, affecting versions prior to 18.0.0.268 and multiple 19.x/20.x releases, on Windows/macOS, and prior Linux release 11.2.202.554, as well as Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Compiler before...

CVE-2015-8645

Adobe Flash Player and Adobe AIR (and related SDK components) are affected by CVE-2015-8645 due to memory corruption from unspecified vectors, enabling arbitrary code execution or memory corruption/DoS. Affected versions: Flash Player before 18.0.0.324 and 19.x and before 20.0.0.267 on Windows/OS...

CVE-2016-1014

CVE-2016-1014 affects Adobe Flash Player. It is an untrusted search path vulnerability that could let local users gain privileges via a Trojan horse resource in an unspecified directory. Affected products/versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on W...

CVE-2016-1016

CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-4130

CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4181

CVE-2016-4181 affects Adobe Flash Player prior to 18.0.0.366 and older 19.x–22.x before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors; the catastrophe is described as a distinct issue ...

CVE-2016-4227

Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2017-3064

CVE-2017-3064 affects Adobe Flash Player (browser plug-in) up to version 25.0.0.127, with a memory corruption vulnerability triggered while parsing a shape outline that can lead to arbitrary code execution. The issue is confirmed in multiple CVE aggregations tied to APSB17-10; advisories note upg...

CVE-2018-4935

Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...

CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...

CVE-2010-2161

CVE-2010-2161 describes an array index error in Adobe Flash Player (before 9.0.277.0 and in 10.x before 10.1.53.64) and Adobe AIR before 2.0.2.12610 that could allow arbitrary code execution via unspecified Flash content. Affected software includes Flash Player and AIR; root cause per the descrip...

CVE-2010-2172

Technical specifics for CVE-2010-2172 (affected software, root cause, impact, or fix) are not provided in the connected documents; monitor for updates.

CVE-2011-0618

CVE-2011-0618 : Integer overflow in Adobe Flash Player before 10.3.181.14 (Windows, macOS, Linux, Solaris) and before 10.3.185.21 on Android allows arbitrary code execution via unspecified vectors. Affected versions are Flash Player prior to these builds; vulnerable component/function not detaile...

CVE-2011-0627

Adobe Flash Player CVE-2011-0627 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption (leading to a possible DoS) via crafted Flash content...

CVE-2011-2444

CVE-2011-2444 is an XSS vulnerability in Adobe Flash Player prior to 10.3.183.10 (Windows, macOS, Linux, Solaris) and prior to 10.3.186.7 on Android. It allows remote attackers to inject arbitrary script/HTML via a crafted URL. The issue was exploited in the wild around September 2011. The connec...

CVE-2012-0755

The CVE refers to Adobe Flash Player for Windows, macOS, Linux, Solaris, and Android, where multiple versions are affected. Specifically, Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on desktop platforms; before 11.1.111.6 on Android 2.x/3.x; and before 11.1.115.6 on Android 4.x ar...

CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...