CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...

CVE-2010-2161

CVE-2010-2161 describes an array index error in Adobe Flash Player (before 9.0.277.0 and in 10.x before 10.1.53.64) and Adobe AIR before 2.0.2.12610 that could allow arbitrary code execution via unspecified Flash content. Affected software includes Flash Player and AIR; root cause per the descrip...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

CVE-2010-2176

Technical details about CVE-2010-2176 are not publicly available in the provided documents. The connected EUVD entries mention malware context but do not specify affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2011-0618

CVE-2011-0618 : Integer overflow in Adobe Flash Player before 10.3.181.14 (Windows, macOS, Linux, Solaris) and before 10.3.185.21 on Android allows arbitrary code execution via unspecified vectors. Affected versions are Flash Player prior to these builds; vulnerable component/function not detaile...

CVE-2011-0626

Adobe Flash Player CVE-2011-0626 is a high-severity vulnerability affecting Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is described as a bounds-checking bug that enables arbitrary code execution via unspecified vectors. Publ...

CVE-2011-2452

CVE-2011-2452 is a Flash Player/Adobe AIR vulnerability family affecting multiple platforms (Windows, macOS, Linux, Solaris, Android) with memory corruption that could allow arbitrary code execution or memory corruption-based DoS. The issue is part of a broader set of Adobe Flash Player vulnerabi...

CVE-2011-2454

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...

CVE-2011-2455

CVE-2011-2455 affects Adobe Flash Player and Adobe AIR with memory corruption flaws that can lead to arbitrary code execution or denial of service. Affected versions include Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 (and Android/other platforms as specified), with fixes delivere...

CVE-2013-1375

CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...

CVE-2014-0538

CVE-2014-0538 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that could allow arbitrary code execution. According to the initial entry, it affects Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and macOS, and before 11.2.202.400 on Linux...

CVE-2014-0550

Technical details about CVE-2014-0550 are not provided in the connected documents. Public information in the initial entry lists affected versions and impact but no concrete root-cause, exploit details, or remediation are included here. Monitor for updates.

CVE-2014-0577

CVE-2014-0577 is a type confusion vulnerability in Adobe Flash Player (affecting Windows/macOS: before 13.0.0.252 and 14.x; before 15.0.0.223 for 14.x/15.x; Linux: before 11.2.202.418) and in Adobe AIR/SDK before 15.0.0.356. The issue could allow remote code execution via a crafted SWF file. Open...

CVE-2015-0303

CVE-2015-0303 affects Adobe Flash Player and Adobe AIR as described in APSB15-01. The vulnerability is a memory corruption in Flash Player that could allow remote code execution or a denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to...

CVE-2015-3121

Technical details (affected products/versions/attack vectors) for CVE-2015-3121 are not publicly provided in the supplied documents. Monitor for updated advisories or vendor bulletins to confirm affected components and fixes.

CVE-2015-3122

CVE-2015-3122 is a type confusion vulnerability in Adobe Flash Player and related Adobe AIR components. Affected products include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 an...

CVE-2015-3126

CVE-2015-3126 is an Adobe Flash Player issue (APSB15-16) described in connected advisories as a NULL pointer dereference. The vulnerability contributes to denial of service and possible other impacts; it’s part of a set of Flash vulnerabilities addressed in SUSE advisories and other sources. Affe...

CVE-2015-5540

CVE-2015-5540 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR/AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. It is described as a different issue from CVE-2015-5127, CVE-2...

CVE-2015-5546

CVE-2015-5546 concerns Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and associated AIR SDK/SDK & Compiler, where memory corruption during SWF parsing can allow a remote attacker to execute arbitrary code or cause a denial of servic...

CVE-2015-5572

Adobe Flash Player and related Adobe AIR components are affected by CVE-2015-5572, a security bypass that allows information disclosure by bypassing intended access restrictions. The vulnerability affects Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11...

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8409

Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 (Windows/macOS) and prior to 11.2.202.554 (Linux), Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 are affected by CVE-2015-8409, which allows bypassing ...

CVE-2015-8410

The vulnerability CVE-2015-8410 is a use-after-free issue in Adobe Flash Player (Windows, OS X before 18.0.0.268 and 19.x; 20.x before 20.0.0.228) and Linux before 11.2.202.554, plus Adobe AIR before 20.0.0.204 (and related AIR SDK packages) that allows arbitrary code execution via unspecified ve...

CVE-2015-8411

Technical details about CVE-2015-8411 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8412

Technical details for CVE-2015-8412 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-8430

Technical details for CVE-2015-8430 are not provided in the supplied documents. Please monitor for updates from official advisories; the current sources do not specify affected products, root cause, vectors, or mitigations.

CVE-2015-8431

Technical details for CVE-2015-8431 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...

CVE-2015-8441

Technical details for CVE-2015-8441 are not publicly provided in the supplied documents; no product/vendor/version information or remediation is described here. Monitor for updates as connected EUVD records reference malware but do not provide vulnerability specifics.

CVE-2015-8443

Technical details for CVE-2015-8443 are not publicly available in the provided Connected documents. No specifics on affected products, root cause, impact, or fixes are available here. Monitor for updates and additional disclosures.

CVE-2015-8449

CVE-2015-8449 describes a use-after-free in the MovieClip implementation of Adobe Flash Player, affecting versions prior to 18.0.0.268 and multiple 19.x/20.x releases, on Windows/macOS, and prior Linux release 11.2.202.554, as well as Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Compiler before...

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2015-8820

CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...

CVE-2016-0959

The CVE-2016-0959 entry concerns a use-after-free vulnerability in multiple Adobe Flash Player components (Desktop Runtime prior to 20.0.0.267, Extended Support Release prior to 18.0.0.324, Chrome/Edge/IE builds prior to 20.0.0.267, Linux version prior to 11.2.202.559, AIR Runtime/SDK before 20.0...

CVE-2016-1017

Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.

CVE-2016-1024

Technical details for CVE-2016-1024 are not provided in the connected documents. The initial CVE description lists a Flash vulnerability with unspecified vectors; no product/version/root cause/fix details are supplied here. Monitor for updates.

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4181

CVE-2016-4181 affects Adobe Flash Player prior to 18.0.0.366 and older 19.x–22.x before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors; the catastrophe is described as a distinct issue ...

CVE-2016-4227

Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-4281

Technical details about CVE-2016-4281 are not provided in the supplied documents. Connected EUVD records mention malware “sbrugna” without vulnerability specifics. Monitor for updates from ENISA advisories and related sources.

CVE-2016-4286

CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...

CVE-2016-7873

CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2017-2995

CVE-2017-2995 affects Adobe Flash Player (and corresponding flash plugin) prior to version 24.0.0.221. The vulnerability is a type confusion in the MessageChannel handling path, potentially allowing remote attackers to execute arbitrary code. Flash versions affected include 24.0.0.194 and earlier...

CVE-2007-6245

Adobe Flash Player versions affected by CVE-2007-6245 include 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0. The vulnerability allows remote attackers to modify HTTP headers in client requests, enabling HTTP Request Splitting attacks. Severity is reflected in public CVE data (bas...