CVE-2016-4120

Technical details for CVE-2016-4120 are not provided in the connected documents; public information is not available here. Monitor for updates.

CVE-2015-8449

CVE-2015-8449 describes a use-after-free in the MovieClip implementation of Adobe Flash Player, affecting versions prior to 18.0.0.268 and multiple 19.x/20.x releases, on Windows/macOS, and prior Linux release 11.2.202.554, as well as Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Compiler before...

CVE-2015-8450

Technical details for CVE-2015-8450 are not publicly available in the provided connected documents; monitor for updates from official advisories.

CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-4184

Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.

CVE-2016-4228

CVE-2016-4228 describes a use-after-free in Adobe Flash Player prior to 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux, allowing arbitrary code execution via unspecified vectors. Connected sources indicate exploitation activity: exploit-db entr...

CVE-2016-4281

Technical details about CVE-2016-4281 are not provided in the supplied documents. Connected EUVD records mention malware “sbrugna” without vulnerability specifics. Monitor for updates from ENISA advisories and related sources.

CVE-2016-4286

CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...

CVE-2016-7874

CVE-2016-7874 is a memory corruption vulnerability in Adobe Flash Player (earlier than 24.0.0.186, e.g., 23.0.0.207 and prior) that is triggered in the NetConnection class when handling proxy types, potentially allowing arbitrary code execution. Connected sources corroborate an exploitable memory...

CVE-2018-4935

Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...

CVE-2006-3311

CVE-2006-3311 describes a buffer overflow in Adobe Flash Player 8.0.24.0 and earlier (including Flash Pro 8, Flash MX 2004, and Flex 1.5) that could allow a user-assisted remote attacker to execute arbitrary code via a long, dynamically created SWF string. Connected advisories confirm this is a r...

CVE-2009-1863

CVE-2009-1863 refers to an unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and in 10.x before 10.0.32.18, and in Adobe AIR before 1.5.2. It can cause a denial of service (application crash) and may allow arbitrary code execution via unknown vectors, with a note of related privile...

CVE-2009-3798

CVE-2009-3798 is part of multiple memory‑corruption flaws in Adobe Flash Player/Flash-plugin as of 2009. Connected advisories indicate this vulnerability (among others) was addressed by updating Flash Player to version 10.0.42.34, with Red Hat advisories RHSA-2009:1657/1658 recommending this upgr...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

CVE-2010-2172

Technical specifics for CVE-2010-2172 (affected software, root cause, impact, or fix) are not provided in the connected documents; monitor for updates.

CVE-2010-2189

CVE-2010-2189 involves Adobe Flash Player (first part: 9.0.277.0 and 10.x prior to 10.1.53.64) and Adobe AIR (before 2.0.2.12610) when used with VMware Tools on VMware, leading to memory corruption with potential arbitrary code execution and a possible denial of service. Connected sources confirm...

CVE-2011-0618

CVE-2011-0618 : Integer overflow in Adobe Flash Player before 10.3.181.14 (Windows, macOS, Linux, Solaris) and before 10.3.185.21 on Android allows arbitrary code execution via unspecified vectors. Affected versions are Flash Player prior to these builds; vulnerable component/function not detaile...

CVE-2011-0625

Affected software: Adobe Flash Player. Vulnerability: a bounds-checking issue allowing arbitrary code execution via unspecified vectors. Affected versions: before 10.3.181.14 on Windows, macOS, Linux, and Solaris; before 10.3.185.21 on Android. CVE family: includes CVE-2011-0625 (and related CVEs...

CVE-2011-0626

Adobe Flash Player CVE-2011-0626 is a high-severity vulnerability affecting Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is described as a bounds-checking bug that enables arbitrary code execution via unspecified vectors. Publ...

CVE-2011-0627

Adobe Flash Player CVE-2011-0627 affects Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption (leading to a possible DoS) via crafted Flash content...

CVE-2011-2415

CVE-2011-2415: Buffer overflow in Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS) and before 2.7.1.1961 on Android. Attacks could execute arbitrary code via unspecified vectors; product versions affect...

CVE-2011-2455

CVE-2011-2455 affects Adobe Flash Player and Adobe AIR with memory corruption flaws that can lead to arbitrary code execution or denial of service. Affected versions include Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 (and Android/other platforms as specified), with fixes delivere...

CVE-2011-2460

CVE-2011-2460 concerns multiple memory-corruption vulnerabilities in Adobe Flash Player (Windows, macOS, Linux, Solaris) and Adobe AIR, allowing arbitrary code execution or denial of service via unspecified vectors. The description in the initial record identifies affected versions as Flash Playe...

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2012-5263

CVE-2012-5263 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR prior to the listed build versions, enabling arbitrary code execution or memory corruption via unspecified vectors. Affected Flash Player versions: Windows/macOS before 10.3.183.29 and 11.x before 11.4.402.287; Linux bef...

CVE-2012-5264

CVE-2012-5264 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. Affected products/versions (per initial description): Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; Flash Pla...

CVE-2013-1375

CVE-2013-1375 describes a heap-based buffer overflow in Adobe Flash Player prior to certain 10.3/11.x revisions and Adobe AIR prior to 3.6.0.6090, allowing arbitrary code execution via unspecified vectors. The initial entry lists affected platforms (Windows, macOS, Linux, Android) and correspondi...

CVE-2013-3343

Technical details for CVE-2013-3343 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates.

CVE-2014-0503

CVE-2014-0503 affects Adobe Flash Player; versions prior to 11.7.700.272 (and 11.8.x through 12.0.x before 12.0.0.77) on Windows/macOS and pre-11.2.202.346 on Linux are vulnerable to bypassing the Same Origin Policy via unspecified vectors. Affected users should upgrade to Flash Player 11.2.202.3...

CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2014-0550

Technical details about CVE-2014-0550 are not provided in the connected documents. Public information in the initial entry lists affected versions and impact but no concrete root-cause, exploit details, or remediation are included here. Monitor for updates.

CVE-2014-9164

Adobe Flash Player vulnerability CVE-2014-9164 affects Windows and OS X: Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235, and Linux before 11.2.202.425, allowing attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Root cause involves memo...

CVE-2015-0303

CVE-2015-0303 affects Adobe Flash Player and Adobe AIR as described in APSB15-01. The vulnerability is a memory corruption in Flash Player that could allow remote code execution or a denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-0325

CVE-2015-0325 affects Adobe Flash Player on Windows, macOS, and Linux (pre-16.0.0.305; Linux pre-11.2.202.442). The root cause is a NULL pointer dereference when processing a crafted SWF, enabling denial of service (per initial) and potentially other impacts. Connected advisories confirm the issu...

CVE-2015-3080

CVE-2015-3080 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) affecting Windows and macOS builds prior to 13.0.0.289 and 14.x up to 17.x before 17.0.0.188, and Linux prior to 11.2.202.460; Adobe AIR before 17.0.0.172 is also affected. The issue enables arbitra...

CVE-2015-3121

Technical details (affected products/versions/attack vectors) for CVE-2015-3121 are not publicly provided in the supplied documents. Monitor for updated advisories or vendor bulletins to confirm affected components and fixes.

CVE-2015-4429

Adobe Flash Player (Windows, OS X, Linux) and related AIR components are affected by CVE-2015-4429, a NULL pointer dereference vulnerability. The issue arises when parsing crafted SWF/FLV content, potentially enabling denial of service and other unspecified impact. Affected versions included Flas...

CVE-2015-5546

CVE-2015-5546 concerns Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and associated AIR SDK/SDK & Compiler, where memory corruption during SWF parsing can allow a remote attacker to execute arbitrary code or cause a denial of servic...

CVE-2015-5561

CVE-2015-5561 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components that potentially allows remote code execution. Affected products and versions (per the description) include: Flash Player before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux;...

CVE-2015-5565

Technical details for CVE-2015-5565 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-7627

Summary (CVE-2015-7627) : Adobe Flash Player and Adobe AIR components are affected by a memory corruption vulnerability triggered by parsing specially crafted SWF content, potentially allowing remote code execution or memory corruption-based denial of service. The CVE is part of a broader 2015 AP...

CVE-2015-8070

Technical details about CVE-2015-8070 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2015-8403

CVE-2015-8403 describes a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.268 and 19.x before 20.0.0.228; Linux before 11.2.202.554) and in Adobe AIR/SDK (before 20.0.0.204) enabling arbitrary code execution via unspecified vectors. Affected products span Flash Player and AIR s...

CVE-2015-8404

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates and official advisories for remediation guidance.

CVE-2015-8405

Technical details about CVE-2015-8405 are not publicly provided in the supplied Connected documents. Monitor for updates; the initial description lists affected products/versions but no further exploit/impact specifics are given.

CVE-2015-8431

Technical details for CVE-2015-8431 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-8435

Technical details for CVE-2015-8435 are not publicly available in the provided documents. Connected EUVD entries describe malware references but do not specify affected products, versions, or root cause. Monitor for updates from official advisories.

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...