CVE-2016-7877

CVE-2016-7877 is a use-after-free vulnerability in Adobe Flash Player AFM0 serialization affecting Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Exploitation could lead to arbitrary code execution. Connected advisories indicate fixes in Flash Player 24.x, e.g., 24.0.0.186 ...

CVE-2017-3060

Adobe Flash Player, versions 25.0.0.127 and earlier, contains a memory corruption vulnerability in the ActionScript2 parser that could lead to arbitrary code execution. Evidence across multiple connected advisories indicates updating to 25.0.0.148 mitigates the issue (APS B17-10) and patches CVE-...

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2008-5363

Affected software: Adobe Flash Player (10.x before 10.0.12.36; 9.x before 9.0.151.0) and Adobe AIR before 1.5. The issue: ActionScript 2 VM does not validate character elements when retrieved from the dictionary data structure, enabling a remote attacker to trigger a NULL pointer dereference and ...

CVE-2010-2170

CVE-2010-2170 refers to an integer overflow in Adobe Flash Player before 9.0.277.0 and in the 10.x line before 10.1.53.64, as well as in Adobe AIR before 2.0.2.12610, which could allow an attacker to execute arbitrary code via unspecified vectors. Affected components/versions are stated; root cau...

CVE-2010-2176

Technical details about CVE-2010-2176 are not publicly available in the provided documents. The connected EUVD entries mention malware context but do not specify affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2010-2185

CVE-2010-2185 is a buffer overflow vulnerability in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, as well as in Adobe AIR prior to 2.0.2.12610, that could allow remote arbitrary code execution via unspecified vectors. Publicly noted affected products/versions inc...

CVE-2011-2445

CVE-2011-2445 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors, with m...

CVE-2012-5249

CVE-2012-5249 is a buffer-overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution. Affected: Flash Player pre-10.3.183.29 and pre-11.4.402.287 on Windows/Mac; pre-10.3.183.29 and pre-11.2.202.243 on Linux; Android 2.x–4.x; and Adobe AIR pre-3.4.0.2710. Root cause: buffer...

CVE-2013-1365

No connected documents provide concrete technical details for CVE-2013-1365 beyond the initial description. Technical specifics (affected products/versions, root cause, exploitability) are not publicly disclosed here. Monitor for updates and new disclosures.

CVE-2013-2728

CVE-2013-2728 concerns Adobe Flash Player (and AIR) with a memory-corruption based vulnerability that could allow arbitrary code execution or a denial of service via unspecified vectors. The initial description lists affected versions: Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 ...

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0547

Adobe Flash Player and AIR components are affected by a memory-corruption vulnerability (CVE-2014-0547) that can be triggered by unspecified vectors. Impacted products include Flash Player versions prior to 13.0.0.244 and 14.x/15.x prior to 15.0.0.152 on Windows and OS X, and prior to 11.2.202.40...

CVE-2014-0587

Adobe Flash Player vulnerability CVE-2014-0587 is a memory-corruption issue affecting Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows/OS X and Linux before 11.2.202.425. The CVE entry states that an attacker could execute arbitrary code or cause a denial of servi...

CVE-2015-0317

CVE-2015-0317 is a type-confusion, remote-code-execution vulnerability in Adobe Flash Player. Connected sources indicate this affects Flash Player on multiple platforms and is addressed by upgrading to Flash Player version 11.2.202.442 (e.g., openSUSE/RHEL updates). Other entries link CVE-2015-03...

CVE-2015-3121

Technical details (affected products/versions/attack vectors) for CVE-2015-3121 are not publicly provided in the supplied documents. Monitor for updated advisories or vendor bulletins to confirm affected components and fixes.

CVE-2015-3135

CVE-2015-3135 is a vulnerability tied to BIND in BIG-IP products via a DNS64/RPZ interaction. Remote attackers could trigger a denial-of-service by querying AAAA records, due to an inconsistency when DNS64 and RPZ are used together. Affected BIG-IP versions include multiple 11.x–13.x lines with B...

CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-5565

Technical details for CVE-2015-5565 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-5572

Adobe Flash Player and related Adobe AIR components are affected by CVE-2015-5572, a security bypass that allows information disclosure by bypassing intended access restrictions. The vulnerability affects Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11...

CVE-2015-5577

Adobe Flash Player and Adobe AIR are affected by CVE-2015-5577. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/macOS, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 and related AIR SDK/Compiler versions. The vulnerability a...

CVE-2015-5584

Technical details about CVE-2015-5584 are not publicly provided in the connected documents. The initial description lists affected products/versions but no concrete exploit/vulnerability details. Monitor for updates from advisories.

CVE-2015-7638

Technical details about CVE-2015-7638 are not provided in the initial description or the connected EUVD entries. Monitor for updates from official advisories.

CVE-2015-8410

The vulnerability CVE-2015-8410 is a use-after-free issue in Adobe Flash Player (Windows, OS X before 18.0.0.268 and 19.x; 20.x before 20.0.0.228) and Linux before 11.2.202.554, plus Adobe AIR before 20.0.0.204 (and related AIR SDK packages) that allows arbitrary code execution via unspecified ve...

CVE-2015-8441

Technical details for CVE-2015-8441 are not publicly provided in the supplied documents; no product/vendor/version information or remediation is described here. Monitor for updates as connected EUVD records reference malware but do not provide vulnerability specifics.

CVE-2016-1032

Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2016-4287

Adobe Flash Player CVE-2016-4287 is an integer overflow vulnerability that allows remote code execution. Affected platforms include Windows and macOS builds prior to 18.0.0.375 and 19.x through 23.x prior to 23.0.0.162, as well as Linux builds prior to 11.2.202.635. The issue is reported alongsid...

CVE-2016-7871

CVE-2016-7871 affects Adobe Flash Player (Windows/Linux) with memory corruption in the Worker class, exploitable to achieve arbitrary code execution. Vulnerable versions include 23.0.0.207 and earlier (and Linux 11.2.202.644 and earlier per sources). Affected product families include Flash Player...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3083

CVE-2017-3083 concerns Adobe Flash Player (including Flash Plugin) with a use-after-free in the Primetime SDK profile metadata of the media stream, enabling potential remote code execution. Affected versions include 25.0.0.171 and earlier (and related entries refer to

CVE-2018-4937

CVE-2018-4937 affects Adobe Flash Player prior to 29.0.0.140 (APSB18-08). The issue is an exploitable out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Affected versions include 29.0.0.113 and earlier; remediation is upgrading to 29.0.0.140 or new...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...

CVE-2009-3798

CVE-2009-3798 is part of multiple memory‑corruption flaws in Adobe Flash Player/Flash-plugin as of 2009. Connected advisories indicate this vulnerability (among others) was addressed by updating Flash Player to version 10.0.42.34, with Red Hat advisories RHSA-2009:1657/1658 recommending this upgr...

CVE-2011-0622

Adobe Flash Player vulnerability CVE-2011-0622 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue allows arbitrary code execution or memory corruption via unspecified vectors. The description does not specify exact vulnerabl...

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

CVE-2014-0550

Technical details about CVE-2014-0550 are not provided in the connected documents. Public information in the initial entry lists affected versions and impact but no concrete root-cause, exploit details, or remediation are included here. Monitor for updates.

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2014-0580

CVE-2014-0580 affects Adobe Flash Player prior to 13.0.0.259 and 14.x up to 16.x before 16.0.0.235 on Windows/OS X, and prior to 11.2.202.425 on Linux. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors. The available connected sources identify upda...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-3080

CVE-2015-3080 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) affecting Windows and macOS builds prior to 13.0.0.289 and 14.x up to 17.x before 17.0.0.188, and Linux prior to 11.2.202.460; Adobe AIR before 17.0.0.172 is also affected. The issue enables arbitra...

CVE-2015-3116

Note: Technical details about CVE-2015-3116 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-5557

Technical details for CVE-2015-5557 are not provided in the connected documents; they reference related Flash use-after-free CVEs but do not specify this exact vulnerability’s affected products, root cause, or patch.

CVE-2015-5581

CVE-2015-5581 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote arbitrary-code execution. Affected: Flash Player on Windows, OS X (before 18.0.0.241; before 19.0.0.185 for 19.x), Linux (before 11.2.202.521); Adobe AIR before 19.0.0.190; AIR SD...

CVE-2016-0959

The CVE-2016-0959 entry concerns a use-after-free vulnerability in multiple Adobe Flash Player components (Desktop Runtime prior to 20.0.0.267, Extended Support Release prior to 18.0.0.324, Chrome/Edge/IE builds prior to 20.0.0.267, Linux version prior to 11.2.202.559, AIR Runtime/SDK before 20.0...