CVE-2010-2167

CVE-2010-2167 is a vulnerability in Adobe Flash Player (before 9.0.277.0 and 10.x before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) where heap-based overflows in GIF/JPEG data could lead to arbitrary code execution. The initial description specifies the vectors as malformed GIF/JPEG data, wit...

CVE-2015-7625

CVE-2015-7625 concerns memory corruption/remote code execution in Adobe Flash Player (and related AIR components) via specially crafted SWF content. Public documentation confirms: Flash Player vulnerable on Windows and OS X older builds (before 18.0.0.252 and 19.x before 19.0.0.207), Linux before...

CVE-2015-8401

Technical details for CVE-2015-8401 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2015-8409

Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 (Windows/macOS) and prior to 11.2.202.554 (Linux), Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 are affected by CVE-2015-8409, which allows bypassing ...

CVE-2015-8432

Technical details (affected products, root cause, impact, versions, or exploits) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0959

The CVE-2016-0959 entry concerns a use-after-free vulnerability in multiple Adobe Flash Player components (Desktop Runtime prior to 20.0.0.267, Extended Support Release prior to 18.0.0.324, Chrome/Edge/IE builds prior to 20.0.0.267, Linux version prior to 11.2.202.559, AIR Runtime/SDK before 20.0...

CVE-2016-0992

CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...

CVE-2016-1024

Technical details for CVE-2016-1024 are not provided in the connected documents. The initial CVE description lists a Flash vulnerability with unspecified vectors; no product/version/root cause/fix details are supplied here. Monitor for updates.

CVE-2016-1032

Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-4131

CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...

CVE-2016-4139

CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...

CVE-2016-4162

Technical details for CVE-2016-4162 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2016-4224

CVE-2016-4224 affects Adobe Flash Player prior to 18.0.0.366 (Windows/OS X) and earlier 22.x versions before 22.0.0.209, and Linux before 11.2.202.632. Connected advisories describe a memory corruption issue in Flash Player when parsing a specially crafted SWF file, exploitable remotely by entici...

CVE-2016-7872

CVE-2016-7872 is an use-after-free vulnerability in Adobe Flash Player’s MovieClip handling that affects Flash Player 23.0.0.207 and earlier (Linux 11.2.202.644 and earlier). Successful exploitation could lead to arbitrary code execution. Public sources in connected documents consistently identif...

CVE-2018-4937

CVE-2018-4937 affects Adobe Flash Player prior to 29.0.0.140 (APSB18-08). The issue is an exploitable out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Affected versions include 29.0.0.113 and earlier; remediation is upgrading to 29.0.0.140 or new...

CVE-2008-5363

Affected software: Adobe Flash Player (10.x before 10.0.12.36; 9.x before 9.0.151.0) and Adobe AIR before 1.5. The issue: ActionScript 2 VM does not validate character elements when retrieved from the dictionary data structure, enabling a remote attacker to trigger a NULL pointer dereference and ...

CVE-2010-2176

Technical details about CVE-2010-2176 are not publicly available in the provided documents. The connected EUVD entries mention malware context but do not specify affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2010-2185

CVE-2010-2185 is a buffer overflow vulnerability in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, as well as in Adobe AIR prior to 2.0.2.12610, that could allow remote arbitrary code execution via unspecified vectors. Publicly noted affected products/versions inc...

CVE-2011-0571

Adobe Flash Player prior to 10.2.152.26 is listed as vulnerable to CVE-2011-0571, with potential arbitrary code execution or memory corruption via unspecified vectors. The description notes this is a different vulnerability from a set of other CVEs (CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CV...

CVE-2011-0622

Adobe Flash Player vulnerability CVE-2011-0622 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue allows arbitrary code execution or memory corruption via unspecified vectors. The description does not specify exact vulnerabl...

CVE-2011-2450

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows, macOS, Linux, Solaris) and prior to 11.1.102.59 on Android; Adobe AIR prior to 3.1.0.4880 is affected by CVE-2011-2450, causing arbitrary code execution or memory corruption leading to DoS. Root cause described as mem...

CVE-2011-2459

CVE-2011-2459 affects Adobe Flash Player and Adobe AIR as summarized in the initial entry. The vulnerability is described as a memory corruption issue that could enable remote code execution or cause a denial of service via unspecified vectors (notably separate from several related CVEs). Affecte...

CVE-2012-5275

CVE-2012-5275 is a buffer‑overflow vulnerability in Adobe Flash Player (and related AIR components) that affects multiple platforms (Windows, Mac OS X, Linux, Android 2.x/3.x/4.x) and allows arbitrary code execution via unspecified vectors. The initial description confirms the vulnerability class...

CVE-2013-1366

Technical details for CVE-2013-1366 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-1368

CVE-2013-1368 describes a buffer overflow in multiple Adobe runtimes (Flash Player and Adobe AIR) that permits arbitrary code execution via unspecified vectors. Affected: Windows, Mac OS X, Linux, Android; specific version ranges include Flash Player before 10.3.183.63 and 11.x before 11.6.602.16...

CVE-2013-1373

The CVE-2013-1373 entry concerns a buffer overflow in Adobe Flash Player prior to specific 10.3.183.63/11.x builds and in Adobe AIR prior to 3.6.0.597/3.6.0.599, across Windows, macOS, Linux, Android 2.x–4.x, and AIR SDK. The issue allows arbitrary code execution via unspecified vectors and is de...

CVE-2013-3343

Technical details for CVE-2013-3343 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates.

CVE-2014-0580

CVE-2014-0580 affects Adobe Flash Player prior to 13.0.0.259 and 14.x up to 16.x before 16.0.0.235 on Windows/OS X, and prior to 11.2.202.425 on Linux. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors. The available connected sources identify upda...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-3081

CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...

CVE-2015-3114

CVE-2015-3114 affects Adobe Flash Player and Adobe AIR (as cited in multiple advisories). A security bypass could lead to information disclosure by circumventing access restrictions. Advisories (e.g., SUSE GLSA/NASL entries) indicate this CVE was addressed in Flash Player updates; exact patched v...

CVE-2015-3119

CVE-2015-3119 is a type-confusion bug in Adobe Flash Player (AS2) triggered by a watch on a NetConnection property. When the native code sets a property (e.g., fileList) the watch’s callback redefines the object to a different type (NetStream), causing type confusion and potential misuse of the o...

CVE-2015-3122

CVE-2015-3122 is a type confusion vulnerability in Adobe Flash Player and related Adobe AIR components. Affected products include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 an...

CVE-2015-4431

CVE-2015-4431 is described in connected advisories as Adobe Flash Player null pointer dereference (APSB15-19) triggered by processing a malformed SWF, enabling remote code execution via a crafted file. The advisory confirms remote exploitation potential; no specific affected versions are provided...

CVE-2015-5544

CVE-2015-5544 affects Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199. The description indicates an arbitrary-code execution or memory-corruption vulnerability with unspecified vectors; no concrete exploit details, roo...

CVE-2015-5554

CVE-2015-5554 is a type-confusion vulnerability in Adobe Flash Player that can allow arbitrary code execution. It affects Flash Player on Windows, OS X (and Linux), plus Adobe AIR/AIR SDK prior to 18.0.0.199 (or 18.0.0.199 for AIR components). The exact root cause is described as a type confusion...

CVE-2015-5577

Adobe Flash Player and Adobe AIR are affected by CVE-2015-5577. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/macOS, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 and related AIR SDK/Compiler versions. The vulnerability a...

CVE-2015-5584

Technical details about CVE-2015-5584 are not publicly provided in the connected documents. The initial description lists affected products/versions but no concrete exploit/vulnerability details. Monitor for updates from advisories.

CVE-2015-7634

Adobe Flash Player/Air memory corruption vulnerabilities (CVE-2015-7625, -7626, -7627, -7630, -7633, -7634) were publicly disclosed in 2015. The connected documents describe multiple CVEs tied to memory corruption while parsing specially crafted SWF content, enabling remote code execution or deni...

CVE-2015-8050

Technical details about CVE-2015-8050 are not provided in the connected documents. Monitor for updates.

CVE-2015-8403

CVE-2015-8403 describes a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.268 and 19.x before 20.0.0.228; Linux before 11.2.202.554) and in Adobe AIR/SDK (before 20.0.0.204) enabling arbitrary code execution via unspecified vectors. Affected products span Flash Player and AIR s...

CVE-2015-8416

CVE-2015-8416 affects Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux; Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204. The entry describes arbitrary...

CVE-2015-8441

Technical details for CVE-2015-8441 are not publicly provided in the supplied documents; no product/vendor/version information or remediation is described here. Monitor for updates as connected EUVD records reference malware but do not provide vulnerability specifics.

CVE-2015-8448

Technical details about CVE-2015-8448 are not publicly provided within the connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2015-8641

Technical details for CVE-2015-8641 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-4155

CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2017-3063

CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...