CVE-2016-4237

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2017-3062

Adobe Flash Player: CVE-2017-3062 is a use-after-free vulnerability in ActionScript2 when creating a getter/setter property, affecting Flash Player 25.0.0.127 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is caused by a memory-management flaw in the affect...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2018-4919

CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2010-2176

Technical details about CVE-2010-2176 are not publicly available in the provided documents. The connected EUVD entries mention malware context but do not specify affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2010-2186

Technical details (affected product/version, root cause, impact, or patch) are not provided in the connected documents for CVE-2010-2186. Monitor for updates.

CVE-2011-2452

CVE-2011-2452 is a Flash Player/Adobe AIR vulnerability family affecting multiple platforms (Windows, macOS, Linux, Solaris, Android) with memory corruption that could allow arbitrary code execution or memory corruption-based DoS. The issue is part of a broader set of Adobe Flash Player vulnerabi...

CVE-2011-2454

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0538

CVE-2014-0538 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that could allow arbitrary code execution. According to the initial entry, it affects Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and macOS, and before 11.2.202.400 on Linux...

CVE-2014-0547

Adobe Flash Player and AIR components are affected by a memory-corruption vulnerability (CVE-2014-0547) that can be triggered by unspecified vectors. Impacted products include Flash Player versions prior to 13.0.0.244 and 14.x/15.x prior to 15.0.0.152 on Windows and OS X, and prior to 11.2.202.40...

CVE-2014-0578

CVE-2014-0578 affects Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux, plus Adobe AIR before 18.0.0.180 and related SDKs. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vecto...

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...

CVE-2014-9162

CVE-2014-9162 affects Adobe Flash Player prior to 13.0.0.259 and, for 14.x through 16.x, prior to 16.0.0.235 on Windows/macOS, and prior to 11.2.202.425 on Linux. The vulnerability, described as an information-disclosure issue, could allow a remote attacker to obtain sensitive information via uns...

CVE-2015-0326

Adobe Flash Player contains a NULL pointer dereference vulnerability (CVE-2015-0326) that affects Windows and macOS builds prior to 16.0.0.305 and Linux prior to 11.2.202.442. OpenSUSE/Nessus entries corroborate NULL pointer dereference variants in the 0325–0328 group, including 0326, with fixes ...

CVE-2015-3123

CVE-2015-3123 affects Adobe Flash Player (Windows/OS X: <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and Adobe AIR (<18.0.0.180, AIR SDK/SDK & Compiler

CVE-2015-4428

Technical details for CVE-2015-4428 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5124

Technical details for CVE-2015-5124 are not publicly provided in the connected documents. No specific affected products, vectors, or fixes are described; monitor for updates.

CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-5541

CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...

CVE-2015-5544

CVE-2015-5544 affects Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199. The description indicates an arbitrary-code execution or memory-corruption vulnerability with unspecified vectors; no concrete exploit details, roo...

CVE-2015-5557

Technical details for CVE-2015-5557 are not provided in the connected documents; they reference related Flash use-after-free CVEs but do not specify this exact vulnerability’s affected products, root cause, or patch.

CVE-2015-5574

CVE-2015-5574 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS; prior to 11.2.202.521 on Linux; AIR before 19.0.0.190 (and AIR SDK before/SDK & Compi...

CVE-2015-7631

CVE-2015-7631 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. It allows attackers to execute arbitrary code via a TextLine object with a crafted validity property. Affected: Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; Flash Player...

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2015-8447

CVE-2015-8447 describes a use-after-free vulnerability in the Color object implementation of Adobe Flash Player. The flaw enables attackers to execute arbitrary code via crafted setTransform arguments. Affected products include Flash Player before 18.0.0.268 and 19.x up to 19.x before 20.0.0.228 ...

CVE-2015-8821

Technical details about CVE-2015-8821 are not publicly available in the provided connected documents. Monitor for official updates from vendors and security advisories.

CVE-2016-0994

The CVE-2016-0994 use-after-free in Adobe Flash Player (pre-18.0.0.333; 19.x–21.x pre-21.0.0.182 on Windows/macOS; pre-11.2.202.577 on Linux) and Adobe AIR pre-21.0.0.176 (SDKs/Compiler) allows arbitrary code execution via crafted arguments to actionCallMethod opcode. Affected components: Flash P...

CVE-2016-0997

CVE-2016-0997 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and Adobe AIR/SDK/SDK & Compiler that can allow arbitrary code execution via unspecified vectors. Affected: Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182; Linux before 11.2.202.577;...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2016-4129

CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...

CVE-2016-4130

CVE-2016-4130 is an Adobe Flash Player vulnerability referenced in multiple advisories (e.g., SUSE/openSUSE, Red Hat) as part of the 2016-06 APSB16-18 update. The affected component is Flash Player as embedded in browsers (e.g., IE/Edge/Flash plugins). Remediation in the connected documents shows...

CVE-2016-4143

CVE-2016-4143 is part of a set of Flash Player vulnerabilities addressed in 2016 advisories. The connected documents identify it as a memory corruption issue in Adobe Flash Player components (used with IE/Edge) that could lead to arbitrary code execution. The Mageia advisory explicitly groups CVE...

CVE-2016-4162

Technical details for CVE-2016-4162 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2016-4245

Technical details for CVE-2016-4245 are not present in the provided documents. The connected EUVD entries mention malware 'sbrugna' but do not specify affected products, versions, or root cause for this CVE. Monitor for updates.

CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2017-2931

CVE-2017-2931 affects Adobe Flash Player versions 24.0.0.186 and earlier, due to a memory corruption vulnerability in SWF metadata parsing that could allow arbitrary code execution. The issue is corroborated across multiple advisories (e.g., ASA-201701-16/17) which state the impact as remote code...

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3060

Adobe Flash Player, versions 25.0.0.127 and earlier, contains a memory corruption vulnerability in the ActionScript2 parser that could lead to arbitrary code execution. Evidence across multiple connected advisories indicates updating to 25.0.0.148 mitigates the issue (APS B17-10) and patches CVE-...

CVE-2017-3077

CVE-2017-3077 affects Adobe Flash Player PNG image parser. The vulnerability is a memory corruption issue that could lead to arbitrary code execution when exploited against vulnerable builds (Flash Player 25.0.0.171 and earlier). Public exploitation evidence exists (Exploit-DB entry; CIRCL sighti...

CVE-2017-3081

CVE-2017-3081 affects Adobe Flash Player. A use-after-free in internal computation caused by multiple display object mask manipulations can be exploited remotely to execute arbitrary code. Affected version: Flash Player 25.0.0.171 and earlier. Several connected advisories indicate fixes in later ...

CVE-2009-1865

CVE-2009-1865 affects Adobe Flash Player prior to 9.0.246.0, Flash Player for 10.x prior to 10.0.32.18, and Adobe AIR prior to 1.5.2, via a null pointer vulnerability that could cause application crash and potentially allow arbitrary code execution. The connected advisories indicate a Flash Playe...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2010-2164

CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...