CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4188

Technical details for CVE-2016-4188 are not publicly available in the provided documents; the connected EUVD entries mention malware in sbrugna but do not describe affected products, versions, or root cause.

CVE-2016-4223

Adobe Flash Player contains a type confusion vulnerability (CVE-2016-4223) that could allow remote code execution. Affected versions include Flash Player before 18.0.0.366 and Windows/OS X 19.x up to 22.x before 22.0.0.209, as well as Linux before 11.2.202.632. The issue, described as a type conf...

CVE-2016-4282

Technical details for CVE-2016-4282 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-7877

CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...

CVE-2017-3064

CVE-2017-3064 affects Adobe Flash Player (browser plug-in) up to version 25.0.0.127, with a memory corruption vulnerability triggered while parsing a shape outline that can lead to arbitrary code execution. The issue is confirmed in multiple CVE aggregations tied to APSB17-10; advisories note upg...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2009-1868

CVE-2009-1868 describes a heap-based buffer overflow in Adobe Flash Player (before 9.0.246.0 and in 10.x before 10.0.32.18) and Adobe AIR (before 1.5.2) that can allow a denial of service or possibly arbitrary code execution via unspecified vectors involving URL parsing. Connected advisories note...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2011-0560

Technical details for CVE-2011-0560 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2013-0650

CVE-2013-0650 is a use-after-free vulnerability in Adobe Flash Player (Windows, macOS, Linux) and related AIR components that could allow arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/Mac; before...

CVE-2014-0510

CVE-2014-0510 involves a heap-based buffer overflow in Adobe Flash Player 12.0.0.77 . The issue allows remote code execution and can bypass sandbox protections via unspecified vectors, as demonstrated by researchers during a Pwn2Own/CanSecWest 2014 event. Affected product is Flash Player (version...

CVE-2014-0520

CVE-2014-0520 is a security bypass vulnerability in Adobe Flash Player and AIR components. Affected are Flash Player versions prior to 13.0.0.214 (Windows/macOS) and prior to 11.2.202.359 (Linux), plus AIR SDK before 13.0.0.111 and AIR SDK & Compiler before 13.0.0.111. The issue stems from an err...

CVE-2015-3114

CVE-2015-3114 affects Adobe Flash Player and Adobe AIR (as cited in multiple advisories). A security bypass could lead to information disclosure by circumventing access restrictions. Advisories (e.g., SUSE GLSA/NASL entries) indicate this CVE was addressed in Flash Player updates; exact patched v...

CVE-2015-3135

CVE-2015-3135 is a vulnerability tied to BIND in BIG-IP products via a DNS64/RPZ interaction. Remote attackers could trigger a denial-of-service by querying AAAA records, due to an inconsistency when DNS64 and RPZ are used together. Affected BIG-IP versions include multiple 11.x–13.x lines with B...

CVE-2015-4428

Technical details for CVE-2015-4428 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5118

CVE-2015-5118 is a heap-based buffer overflow in Adobe Flash Player (Windows/OS X: prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: prior to 11.2.202.481), Adobe AIR before 18.0.0.180, and AIR SDK/Compiler before 18.0.0.180, enabling arbitrary code execution via unspecified vecto...

CVE-2015-5550

CVE-2015-5550 corresponds to a use-after-free in Adobe Flash Player and related AIR components. Affected versions include Flash Player before 18.0.0.232 on Windows/OS X and before 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK before 18.0.0.199 and AIR SDK & Compiler be...

CVE-2015-5556

CVE-2015-5556 describes a use-after-free in Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 on Linux, and in Adobe AIR before 18.0.0.199 (and AIR SDK/SDK Compiler before 18.0.0.199) that may allow arbitrary code execution via unspecified vectors. It is stated to be a ...

CVE-2015-7633

CVE-2015-7633 corresponds to a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, identified as “APSB15-25.” Connected advisories confirm a remote attacker can exploit a crafted SWF file to potentially execute arbitrary code or cause a crash. Affected products...

CVE-2015-8070

Technical details about CVE-2015-8070 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8401

Technical details for CVE-2015-8401 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2015-8433

Technical details for CVE-2015-8433 are not publicly provided in the supplied documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2016-0967

Technical details are not publicly available in the provided documents for CVE-2016-0967; connected EUVD entries only note malware in sbrugna without linking to specific root cause, affected products, or fixes. Monitor for updates.

CVE-2016-1017

Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.

CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-4278

Technical details for CVE-2016-4278 are not publicly available in the provided documents. Monitor for updates from official advisories and affected vendors.

CVE-2016-4286

CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...

CVE-2016-4287

Adobe Flash Player CVE-2016-4287 is an integer overflow vulnerability that allows remote code execution. Affected platforms include Windows and macOS builds prior to 18.0.0.375 and 19.x through 23.x prior to 23.0.0.162, as well as Linux builds prior to 11.2.202.635. The issue is reported alongsid...

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2016-7880

CVE-2016-7880 affects Adobe Flash Player up to version 23.0.0.207 / 11.2.202.644, where an exploitable use-after-free occurs when setting the length property of an array, potentially enabling arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 (and...

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2011-2428

Adobe Flash Player before 10.3.183.10 on Windows/macOS/Linux/Solaris and before 10.3.186.7 on Android is affected by a logic‑error issue that can cause a browser crash and may lead to arbitrary code execution. The CVE‑2011‑2428 entry is referenced in multiple advisories (e.g., RHSA‑2011:1333, RHS...

CVE-2014-0538

CVE-2014-0538 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that could allow arbitrary code execution. According to the initial entry, it affects Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and macOS, and before 11.2.202.400 on Linux...

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2015-0302

CVE-2015-0302 affects Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux, as well as Adobe AIR before 16.0.0.245 on Windows/OS X and before 16.0.0.272 on Android, plus AIR SDK before 16.0.0.272 and AIR SDK & Compiler befo...

CVE-2015-0305

CVE-2015-0305 is a type-confusion vulnerability in Adobe Flash Player (and related AIR components) caused by redefinition of host objects via equality, leading to object type inconsistencies and potential arbitrary code execution. Affected products include Flash Player up to 16.x (Windows/macOS) ...

CVE-2015-0324

CVE-2015-0324 is a buffer/overflow vulnerability in Adobe Flash Player that could allow arbitrary code execution via unspecified vectors. Affected platforms: Windows and macOS (Flash Player < 13.0.0.269 and < 16.x prior to 16.0.0.305) and Linux (Flash Player

CVE-2015-3080

CVE-2015-3080 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) affecting Windows and macOS builds prior to 13.0.0.289 and 14.x up to 17.x before 17.0.0.188, and Linux prior to 11.2.202.460; Adobe AIR before 17.0.0.172 is also affected. The issue enables arbitra...

CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-5548

CVE-2015-5548 affects Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and AIR SDK/Compiler prior to 18.0.0.199. The vulnerability allows attackers to execute arbitrary code or cause a memory corruption-induced denial of serv...

CVE-2015-5588

Technical details about CVE-2015-5588 are not publicly provided in the connected documents. No affected product/version/impact is specified here. Monitor for updates in the EUVD advisories and official vendor bulletins.