CVE-2015-5541

CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...

CVE-2015-5554

CVE-2015-5554 is a type-confusion vulnerability in Adobe Flash Player that can allow arbitrary code execution. It affects Flash Player on Windows, OS X (and Linux), plus Adobe AIR/AIR SDK prior to 18.0.0.199 (or 18.0.0.199 for AIR components). The exact root cause is described as a type confusion...

CVE-2015-5572

Adobe Flash Player and related Adobe AIR components are affected by CVE-2015-5572, a security bypass that allows information disclosure by bypassing intended access restrictions. The vulnerability affects Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11...

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-7630

CVE-2015-7630 is aFlash-related memory corruption/remote code execution vulnerability reported across Adobe Flash Player (Windows, OS X), Linux, and Adobe AIR/AIR SDKs. The connected sources describe the root cause as a memory corruption issue triggered during SWF handling/parsing, with the vulne...

CVE-2015-7631

CVE-2015-7631 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. It allows attackers to execute arbitrary code via a TextLine object with a crafted validity property. Affected: Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; Flash Player...

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-4122

CVE-2016-4122 concerns Adobe Flash Player/Flash plugin. Connected advisories cite multiple vendors (openSUSE/SUSE, Red Hat, ALT Linux, arch linux) reporting this CVE along with related ones (4123–4129, 4130–4132, 4133–4137, 4138–4148, 4150–4171). The vulnerability set includes memory corruption, ...

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4129

CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4227

Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-4281

Technical details about CVE-2016-4281 are not provided in the supplied documents. Connected EUVD records mention malware “sbrugna” without vulnerability specifics. Monitor for updates from ENISA advisories and related sources.

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2017-3084

CVE-2017-3084 affects Adobe Flash Player ≤ 25.0.0.171 with a use-after-free in the advertising metadata path, enabling arbitrary code execution. Multiple connected advisories confirm this as a remote, user-noninteractive vulnerability and map the impact to full code execution on remote attackers ...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...

CVE-2009-1865

CVE-2009-1865 affects Adobe Flash Player prior to 9.0.246.0, Flash Player for 10.x prior to 10.0.32.18, and Adobe AIR prior to 1.5.2, via a null pointer vulnerability that could cause application crash and potentially allow arbitrary code execution. The connected advisories indicate a Flash Playe...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2009-3798

CVE-2009-3798 is part of multiple memory‑corruption flaws in Adobe Flash Player/Flash-plugin as of 2009. Connected advisories indicate this vulnerability (among others) was addressed by updating Flash Player to version 10.0.42.34, with Red Hat advisories RHSA-2009:1657/1658 recommending this upgr...

CVE-2010-2172

Technical specifics for CVE-2010-2172 (affected software, root cause, impact, or fix) are not provided in the connected documents; monitor for updates.

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2011-2444

CVE-2011-2444 is an XSS vulnerability in Adobe Flash Player prior to 10.3.183.10 (Windows, macOS, Linux, Solaris) and prior to 10.3.186.7 on Android. It allows remote attackers to inject arbitrary script/HTML via a crafted URL. The issue was exploited in the wild around September 2011. The connec...

CVE-2011-2454

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...

CVE-2011-2459

CVE-2011-2459 affects Adobe Flash Player and Adobe AIR as summarized in the initial entry. The vulnerability is described as a memory corruption issue that could enable remote code execution or cause a denial of service via unspecified vectors (notably separate from several related CVEs). Affecte...

CVE-2012-5253

Technical details for CVE-2012-5253 are not publicly provided in the connected documents. Monitor for updates from vendor advisories and CVE databases.

CVE-2012-5275

CVE-2012-5275 is a buffer‑overflow vulnerability in Adobe Flash Player (and related AIR components) that affects multiple platforms (Windows, Mac OS X, Linux, Android 2.x/3.x/4.x) and allows arbitrary code execution via unspecified vectors. The initial description confirms the vulnerability class...

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-1375

CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2014-9162

CVE-2014-9162 affects Adobe Flash Player prior to 13.0.0.259 and, for 14.x through 16.x, prior to 16.0.0.235 on Windows/macOS, and prior to 11.2.202.425 on Linux. The vulnerability, described as an information-disclosure issue, could allow a remote attacker to obtain sensitive information via uns...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-0321

CVE-2015-0321 maps to an Adobe Flash Player memory corruption vulnerability. Connected exploits describe a PCRE engine handling error that allows remote code execution by abusing a PCRE Bytecode path in Flash Player. The related exploit (Exploit-DB 36420) is a Metasploit module titled “Adobe Flas...

CVE-2015-3135

CVE-2015-3135 is a vulnerability tied to BIND in BIG-IP products via a DNS64/RPZ interaction. Remote attackers could trigger a denial-of-service by querying AAAA records, due to an inconsistency when DNS64 and RPZ are used together. Affected BIG-IP versions include multiple 11.x–13.x lines with B...

CVE-2015-5544

CVE-2015-5544 affects Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199. The description indicates an arbitrary-code execution or memory-corruption vulnerability with unspecified vectors; no concrete exploit details, roo...

CVE-2015-5546

CVE-2015-5546 concerns Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and associated AIR SDK/SDK & Compiler, where memory corruption during SWF parsing can allow a remote attacker to execute arbitrary code or cause a denial of servic...

CVE-2015-5557

Technical details for CVE-2015-5557 are not provided in the connected documents; they reference related Flash use-after-free CVEs but do not specify this exact vulnerability’s affected products, root cause, or patch.

CVE-2015-5577

Adobe Flash Player and Adobe AIR are affected by CVE-2015-5577. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/macOS, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 and related AIR SDK/Compiler versions. The vulnerability a...

CVE-2015-5581

CVE-2015-5581 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote arbitrary-code execution. Affected: Flash Player on Windows, OS X (before 18.0.0.241; before 19.0.0.185 for 19.x), Linux (before 11.2.202.521); Adobe AIR before 19.0.0.190; AIR SD...

CVE-2015-5588

Technical details about CVE-2015-5588 are not publicly provided in the connected documents. No affected product/version/impact is specified here. Monitor for updates in the EUVD advisories and official vendor bulletins.

CVE-2015-7625

CVE-2015-7625 concerns memory corruption/remote code execution in Adobe Flash Player (and related AIR components) via specially crafted SWF content. Public documentation confirms: Flash Player vulnerable on Windows and OS X older builds (before 18.0.0.252 and 19.x before 19.0.0.207), Linux before...

CVE-2015-7659

Adobe Flash Player and related AIR components are affected by CVE-2015-7659 due to a type confusion in the NetConnection object implementation. Vulnerable: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS); Linux: before 11.2.202.548; AIR before 19.0.0.241; AIR SDK before ...