CVE-2016-0959

The CVE-2016-0959 entry concerns a use-after-free vulnerability in multiple Adobe Flash Player components (Desktop Runtime prior to 20.0.0.267, Extended Support Release prior to 18.0.0.324, Chrome/Edge/IE builds prior to 20.0.0.267, Linux version prior to 11.2.202.559, AIR Runtime/SDK before 20.0...

CVE-2016-1017

Technical details about CVE-2016-1017 are not provided in the connected documents. Public information in the initial description is high-level; monitor for updates from vendors and security advisories.

CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-4111

Technical details for CVE-2016-4111 are not publicly provided in the supplied documents. Monitor for updates; current materials do not reveal affected products, root cause, or fixes for this entry.

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4181

CVE-2016-4181 affects Adobe Flash Player prior to 18.0.0.366 and older 19.x–22.x before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors; the catastrophe is described as a distinct issue ...

CVE-2016-4225

CVE-2016-4225 is described as a memory corruption vulnerability in Adobe Flash Player caused by an error while parsing a specially crafted SWF file. The issue was disclosed in APSB16-25 and is exploitable by a remote attacker who lures a user to open the crafted file. Affected products include Ad...

CVE-2016-7873

CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2017-3077

CVE-2017-3077 affects Adobe Flash Player PNG image parser. The vulnerability is a memory corruption issue that could lead to arbitrary code execution when exploited against vulnerable builds (Flash Player 25.0.0.171 and earlier). Public exploitation evidence exists (Exploit-DB entry; CIRCL sighti...

CVE-2017-3081

CVE-2017-3081 affects Adobe Flash Player. A use-after-free in internal computation caused by multiple display object mask manipulations can be exploited remotely to execute arbitrary code. Affected version: Flash Player 25.0.0.171 and earlier. Several connected advisories indicate fixes in later ...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

CVE-2010-2164

CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...

CVE-2010-2169

Affected software: Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. Root cause/impact: vulnerability causes pointer memory corruption that can lead to a denial of service or, potentially, arbitrary code execution via unspecified vector...

CVE-2010-2186

Technical details (affected product/version, root cause, impact, or patch) are not provided in the connected documents for CVE-2010-2186. Monitor for updates.

CVE-2011-0572

Technical details for CVE-2011-0572 are not publicly available in the provided documents; monitor for updates.

CVE-2011-0626

Adobe Flash Player CVE-2011-0626 is a high-severity vulnerability affecting Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is described as a bounds-checking bug that enables arbitrary code execution via unspecified vectors. Publ...

CVE-2011-0627

Adobe Flash Player CVE-2011-0627 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption (leading to a possible DoS) via crafted Flash content...

CVE-2011-2444

CVE-2011-2444 is an XSS vulnerability in Adobe Flash Player prior to 10.3.183.10 (Windows, macOS, Linux, Solaris) and prior to 10.3.186.7 on Android. It allows remote attackers to inject arbitrary script/HTML via a crafted URL. The issue was exploited in the wild around September 2011. The connec...

CVE-2011-2452

CVE-2011-2452 is a Flash Player/Adobe AIR vulnerability family affecting multiple platforms (Windows, macOS, Linux, Solaris, Android) with memory corruption that could allow arbitrary code execution or memory corruption-based DoS. The issue is part of a broader set of Adobe Flash Player vulnerabi...

CVE-2011-2454

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...

CVE-2012-5253

Technical details for CVE-2012-5253 are not publicly provided in the connected documents. Monitor for updates from vendor advisories and CVE databases.

CVE-2012-5275

CVE-2012-5275 is a buffer‑overflow vulnerability in Adobe Flash Player (and related AIR components) that affects multiple platforms (Windows, Mac OS X, Linux, Android 2.x/3.x/4.x) and allows arbitrary code execution via unspecified vectors. The initial description confirms the vulnerability class...

CVE-2013-1368

CVE-2013-1368 describes a buffer overflow in multiple Adobe runtimes (Flash Player and Adobe AIR) that permits arbitrary code execution via unspecified vectors. Affected: Windows, Mac OS X, Linux, Android; specific version ranges include Flash Player before 10.3.183.63 and 11.x before 11.6.602.16...

CVE-2013-1372

Technical details about CVE-2013-1372 are not provided in the supplied documents. Public information available here is limited to the description in the initial entry; no affected products, versions, impact, or fixes are confirmed. Monitor for updates.

CVE-2015-0303

CVE-2015-0303 affects Adobe Flash Player and Adobe AIR as described in APSB15-01. The vulnerability is a memory corruption in Flash Player that could allow remote code execution or a denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to...

CVE-2015-0321

CVE-2015-0321 maps to an Adobe Flash Player memory corruption vulnerability. Connected exploits describe a PCRE engine handling error that allows remote code execution by abusing a PCRE Bytecode path in Flash Player. The related exploit (Exploit-DB 36420) is a Metasploit module titled “Adobe Flas...

CVE-2015-0324

CVE-2015-0324 is a buffer/overflow vulnerability in Adobe Flash Player that could allow arbitrary code execution via unspecified vectors. Affected platforms: Windows and macOS (Flash Player < 13.0.0.269 and < 16.x prior to 16.0.0.305) and Linux (Flash Player

CVE-2015-3114

CVE-2015-3114 affects Adobe Flash Player and Adobe AIR (as cited in multiple advisories). A security bypass could lead to information disclosure by circumventing access restrictions. Advisories (e.g., SUSE GLSA/NASL entries) indicate this CVE was addressed in Flash Player updates; exact patched v...

CVE-2015-3119

CVE-2015-3119 is a type-confusion bug in Adobe Flash Player (AS2) triggered by a watch on a NetConnection property. When the native code sets a property (e.g., fileList) the watch’s callback redefines the object to a different type (NetStream), causing type confusion and potential misuse of the o...

CVE-2015-5134

Technical details for CVE-2015-5134 are not publicly available in the provided documents. No affected products, vulnerability specifics, impact, or fixes are described in the connected sources.

CVE-2015-5552

Technical details for CVE-2015-5552 (affected products, root cause, impact, and fixes) are not present in the provided connected documents. Monitor for official disclosures or updates to confirm vulnerability specifics and remediation.

CVE-2015-5575

Technical details for CVE-2015-5575 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-7627

Summary (CVE-2015-7627) : Adobe Flash Player and Adobe AIR components are affected by a memory corruption vulnerability triggered by parsing specially crafted SWF content, potentially allowing remote code execution or memory corruption-based denial of service. The CVE is part of a broader 2015 AP...

CVE-2015-8403

CVE-2015-8403 describes a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.268 and 19.x before 20.0.0.228; Linux before 11.2.202.554) and in Adobe AIR/SDK (before 20.0.0.204) enabling arbitrary code execution via unspecified vectors. Affected products span Flash Player and AIR s...

CVE-2015-8412

Technical details for CVE-2015-8412 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-8416

CVE-2015-8416 affects Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux; Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204. The entry describes arbitrary...

CVE-2015-8419

CVE-2015-8419 concerns Adobe Flash Player and related Adobe AIR components. Affected software includes Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows and OS X, and prior to 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204; and Adobe AIR SDK/Compiler before 20....

CVE-2015-8423

Technical details about CVE-2015-8423 (affected products, vulnerable components, exploit vectors, impact) are not publicly available in the provided documents. Monitor for updates and authoritative advisories.

CVE-2015-8428

Technical details about CVE-2015-8428 are not publicly available in the provided connected documents. The EUVD entries mention malware context but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2015-8432

Technical details (affected products, root cause, impact, versions, or exploits) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...

CVE-2015-8449

CVE-2015-8449 describes a use-after-free in the MovieClip implementation of Adobe Flash Player, affecting versions prior to 18.0.0.268 and multiple 19.x/20.x releases, on Windows/macOS, and prior Linux release 11.2.202.554, as well as Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Compiler before...

CVE-2015-8450

Technical details for CVE-2015-8450 are not publicly available in the provided connected documents; monitor for updates from official advisories.

CVE-2015-8638

Technical details for CVE-2015-8638 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8641

Technical details for CVE-2015-8641 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2016-0971

CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...

CVE-2016-1016

CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...