CVE-2016-0959

The CVE-2016-0959 entry concerns a use-after-free vulnerability in multiple Adobe Flash Player components (Desktop Runtime prior to 20.0.0.267, Extended Support Release prior to 18.0.0.324, Chrome/Edge/IE builds prior to 20.0.0.267, Linux version prior to 11.2.202.559, AIR Runtime/SDK before 20.0...

CVE-2016-0977

Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-0989

Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...

CVE-2016-0992

CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...

CVE-2016-1002

Adobe Flash Player and Adobe AIR components are affected by a memory‑corruption vulnerability (CVE-2016-1002) that can lead to arbitrary code execution or a denial of service. The issue is described across multiple CNVD entries as a memory‑corruption vulnerability in Flash Player that could be ex...

CVE-2016-1024

Technical details for CVE-2016-1024 are not provided in the connected documents. The initial CVE description lists a Flash vulnerability with unspecified vectors; no product/version/root cause/fix details are supplied here. Monitor for updates.

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4184

Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.

CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-4241

Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2016-7881

CVE-2016-7881 affects Adobe Flash Player up to version 23.0.0.207 (and the Linux 11.2.202.644 line) and results in an exploitable use-after-free in the MovieClip class when converting to an object, with the impact of arbitrary code execution. Several connected advisories cite this issue among a b...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2007-6019

CVE-2007-6019 affects Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier). The vulnerability arises from a modified DeclareFunction2 Actionscript tag that can prevent object instantiation, enabling remote arbitrary-code execution when a crafted SWF is processed. Remediation mentio...

CVE-2009-1863

CVE-2009-1863 refers to an unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and in 10.x before 10.0.32.18, and in Adobe AIR before 1.5.2. It can cause a denial of service (application crash) and may allow arbitrary code execution via unknown vectors, with a note of related privile...

CVE-2009-1865

CVE-2009-1865 affects Adobe Flash Player prior to 9.0.246.0, Flash Player for 10.x prior to 10.0.32.18, and Adobe AIR prior to 1.5.2, via a null pointer vulnerability that could cause application crash and potentially allow arbitrary code execution. The connected advisories indicate a Flash Playe...

CVE-2010-2161

CVE-2010-2161 describes an array index error in Adobe Flash Player (before 9.0.277.0 and in 10.x before 10.1.53.64) and Adobe AIR before 2.0.2.12610 that could allow arbitrary code execution via unspecified Flash content. Affected software includes Flash Player and AIR; root cause per the descrip...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

CVE-2010-2169

Affected software: Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. Root cause/impact: vulnerability causes pointer memory corruption that can lead to a denial of service or, potentially, arbitrary code execution via unspecified vector...

CVE-2010-2174

CVE-2010-2174 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player for 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is an invalid pointer issue related to the newfunction (0x44) operator and is exploitable via unspecified vectors, enabling arbitrary co...

CVE-2011-0627

Adobe Flash Player CVE-2011-0627 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption (leading to a possible DoS) via crafted Flash content...

CVE-2011-2429

CVE-2011-2429 affects Adobe Flash Player prior to 10.3.183.10 on Windows/macOS/Linux/Solaris, and prior to 10.3.186.7 on Android. The issue is a security control bypass that could disclose sensitive information via unspecified vectors, implying a partial confidentiality impact. The description in...

CVE-2011-2450

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows, macOS, Linux, Solaris) and prior to 11.1.102.59 on Android; Adobe AIR prior to 3.1.0.4880 is affected by CVE-2011-2450, causing arbitrary code execution or memory corruption leading to DoS. Root cause described as mem...

CVE-2011-2458

CVE-2011-2458 : Adobe Flash Player (and related AIR runtime) versions prior to the patched releases are vulnerable to a cross-domain policy bypass when loaded via Internet Explorer. Affected: Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows/macOS/Linux/Solaris, and before 11...

CVE-2011-2459

CVE-2011-2459 affects Adobe Flash Player and Adobe AIR as summarized in the initial entry. The vulnerability is described as a memory corruption issue that could enable remote code execution or cause a denial of service via unspecified vectors (notably separate from several related CVEs). Affecte...

CVE-2011-2460

CVE-2011-2460 concerns multiple memory-corruption vulnerabilities in Adobe Flash Player (Windows, macOS, Linux, Solaris) and Adobe AIR, allowing arbitrary code execution or denial of service via unspecified vectors. The description in the initial record identifies affected versions as Flash Playe...

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...

CVE-2013-1373

The CVE-2013-1373 entry concerns a buffer overflow in Adobe Flash Player prior to specific 10.3.183.63/11.x builds and in Adobe AIR prior to 3.6.0.597/3.6.0.599, across Windows, macOS, Linux, Android 2.x–4.x, and AIR SDK. The issue allows arbitrary code execution via unspecified vectors and is de...

CVE-2014-0503

CVE-2014-0503 affects Adobe Flash Player; versions prior to 11.7.700.272 (and 11.8.x through 12.0.x before 12.0.0.77) on Windows/macOS and pre-11.2.202.346 on Linux are vulnerable to bypassing the Same Origin Policy via unspecified vectors. Affected users should upgrade to Flash Player 11.2.202.3...

CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2014-0550

Technical details about CVE-2014-0550 are not provided in the connected documents. Public information in the initial entry lists affected versions and impact but no concrete root-cause, exploit details, or remediation are included here. Monitor for updates.

CVE-2014-8438

CVE-2014-8438 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote code execution via specially crafted MP4 loading, affecting multiple Flash Player branches (Windows, OS X, Linux) and leading to potential arbitrary code execution. A patch level ...

CVE-2014-9164

Adobe Flash Player vulnerability CVE-2014-9164 affects Windows and OS X: Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235, and Linux before 11.2.202.425, allowing attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Root cause involves memo...

CVE-2015-0303

CVE-2015-0303 affects Adobe Flash Player and Adobe AIR as described in APSB15-01. The vulnerability is a memory corruption in Flash Player that could allow remote code execution or a denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-3126

CVE-2015-3126 is an Adobe Flash Player issue (APSB15-16) described in connected advisories as a NULL pointer dereference. The vulnerability contributes to denial of service and possible other impacts; it’s part of a set of Flash vulnerabilities addressed in SUSE advisories and other sources. Affe...

CVE-2015-4429

Adobe Flash Player (Windows, OS X, Linux) and related AIR components are affected by CVE-2015-4429, a NULL pointer dereference vulnerability. The issue arises when parsing crafted SWF/FLV content, potentially enabling denial of service and other unspecified impact. Affected versions included Flas...

CVE-2015-5541

CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...

CVE-2015-5544

CVE-2015-5544 affects Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and before 11.2.202.508 on Linux, as well as Adobe AIR before 18.0.0.199. The description indicates an arbitrary-code execution or memory-corruption vulnerability with unspecified vectors; no concrete exploit details, roo...

CVE-2015-5575

Technical details for CVE-2015-5575 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5577

Adobe Flash Player and Adobe AIR are affected by CVE-2015-5577. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/macOS, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 and related AIR SDK/Compiler versions. The vulnerability a...

CVE-2015-5579

The CVE-2015-5579 entry concerns Adobe Flash Player and related AIR components. Affected components include Flash Player on Windows/OS X (before 18.0.0.241 and 19.x before 19.0.0.185) and Linux (before 11.2.202.521), Adobe AIR before 19.0.0.190, and the AIR SDK and AIR SDK & Compiler before 19.0....

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-6678

CVE-2015-6676 affects Adobe Flash Player and AIR components. The vulnerability is a buffer overflow in Flash Player before 18.0.0.241 and in the 19.x line before 19.0.0.185 (Windows/OS X) and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Th...

CVE-2015-7626

Adobe Flash Player contains a memory corruption vulnerability (CVE-2015-7626) that can lead to arbitrary code execution or a crash via unspecified vectors, affecting Windows/macOS versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207, Linux prior to 11.2.202.535, and Adobe AIR prior to 19.0.0...

CVE-2015-8404

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates and official advisories for remediation guidance.

CVE-2015-8409

Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 (Windows/macOS) and prior to 11.2.202.554 (Linux), Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 are affected by CVE-2015-8409, which allows bypassing ...

CVE-2015-8429

CVE-2015-8429 reports a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/macOS; pre-11.2.202.554 on Linux), as well as Adobe AIR and related SDKs before 20.0.0.204. The issue allows attackers to execute arbitrary code via unspecified ...

CVE-2015-8448

Technical details about CVE-2015-8448 are not publicly provided within the connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2015-8455

The CVE-2015-8455 entry concerns Adobe Flash Player versions prior to 18.0.0.268 and 19.x and prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204, the Adobe AIR SDK before 20.0.0.204, and the Adobe AIR SDK & Compiler before 20.0.0.204. The vul...