CVE-2016-0978

CVE-2016-0978 covers multiple Adobe Flash Player versions (Windows, macOS, Linux) before 20.0.0.306 for Flash Player and before 20.0.0.260 for AIR/SDK/SDK & Compiler. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is separate from CVE-2016-0964/...

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-4155

CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...

CVE-2016-4163

Technical details about CVE-2016-4163 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the EUVD entries reference malware but do not clarify product/version specifics or vulnerability mechanics.

CVE-2017-2931

CVE-2017-2931 affects Adobe Flash Player versions 24.0.0.186 and earlier, due to a memory corruption vulnerability in SWF metadata parsing that could allow arbitrary code execution. The issue is corroborated across multiple advisories (e.g., ASA-201701-16/17) which state the impact as remote code...

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2017-3063

CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...

CVE-2017-3081

CVE-2017-3081 affects Adobe Flash Player. A use-after-free in internal computation caused by multiple display object mask manipulations can be exploited remotely to execute arbitrary code. Affected version: Flash Player 25.0.0.171 and earlier. Several connected advisories indicate fixes in later ...

CVE-2008-4503

CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...

CVE-2010-2164

CVE-2010-2164 is a use-after-free vulnerability in Adobe Flash Player (before 9.0.277.0 and before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) that could enable arbitrary code execution via an unspecified image-type path in a function. Connected advisories indicate this CVE is addressed by upd...

CVE-2010-2181

Technical details about CVE-2010-2181 (affected product/version/root cause/impact) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2011-0618

An integer overflow vulnerability exists in Adobe Flash Player affecting versions before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.185.21 on Android. This flaw allows an attacker to execute arbitrary code via unspecified vectors. In certain scenarios, a remote attacker...

CVE-2011-0624

CVE-2011-0624 affects Adobe Flash Player prior to 10.3.181.14 (Windows, Mac, Linux, Solaris) and before 10.3.185.21 on Android, with the issue described as a bounds-checking vulnerability that can allow arbitrary code execution. Affected components include the Flash Player runtime; exploitation s...

CVE-2011-0626

Adobe Flash Player CVE-2011-0626 is a high-severity vulnerability affecting Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is described as a bounds-checking bug that enables arbitrary code execution via unspecified vectors. Publ...

CVE-2011-2455

CVE-2011-2455 affects Adobe Flash Player and Adobe AIR with memory corruption flaws that can lead to arbitrary code execution or denial of service. Affected versions include Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 (and Android/other platforms as specified), with fixes delivere...

CVE-2012-4164

Adobe Flash Player (and AIR) vulnerability CVE-2012-4164 allows arbitrary code execution or memory corruption via unspecified vectors across Windows, Mac OS X, Linux, and Android; affected versions listed in the initial description (pre-10.3.183.23, pre-11.4.402.265 on Windows/Mac; pre-11.2.202.2...

CVE-2012-5262

CVE-2012-5262 corresponds to a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR, affecting Flash Player on Windows/Mac OS X prior to 11.4.402.287 (and earlier build 10.3.183.29), Linux prior to 11.2.202.243, Android 2.x/3.x prior to 11.1.111.19, and Android 4.x prior to 11.1.115....

CVE-2012-5263

CVE-2012-5263 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR prior to the listed build versions, enabling arbitrary code execution or memory corruption via unspecified vectors. Affected Flash Player versions: Windows/macOS before 10.3.183.29 and 11.x before 11.4.402.287; Linux bef...

CVE-2013-1365

No connected documents provide concrete technical details for CVE-2013-1365 beyond the initial description. Technical specifics (affected products/versions, root cause, exploitability) are not publicly disclosed here. Monitor for updates and new disclosures.

CVE-2014-0517

Adobe Flash Player and AIR vulnerabilities (CVE-2014-0517) allow bypass of intended access restrictions in specific older builds: Flash Player before 13.0.0.214 (Windows/macOS) and before 11.2.202.359 (Linux), and AIR SDK before 13.0.0.111. The issue is described as a bypass via unspecified vecto...

CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2014-0548

Summary (CVE-2014-0548) : Adobe Flash Player (and related AIR SDK packages) contains a vulnerability that could allow a remote bypass of the Same Origin Policy. The Mageia advisory MGASA-2014-0382 notes that Flash Player 11.2.202.406 fixes multiple security issues, including a bypass of the same-...

CVE-2014-0551

Technical details for CVE-2014-0551 are not present in the connected documents; no specific product/version/impact/fix information is available beyond the initial description. Monitor for updates.

CVE-2015-0308

CVE-2015-0308 is a use-after-free in Adobe Flash Player that enables remote code execution via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Wind...

CVE-2015-0338

Adobe Flash Player is affected by an integer overflow (CVE-2015-0338) that could lead to remote code execution. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/macOS , and before 11.2.202.451 on Linux . The root cause is an integer overf...

CVE-2015-3121

Technical details (affected products/versions/attack vectors) for CVE-2015-3121 are not publicly provided in the supplied documents. Monitor for updated advisories or vendor bulletins to confirm affected components and fixes.

CVE-2015-3126

CVE-2015-3126 is an Adobe Flash Player issue (APSB15-16) described in connected advisories as a NULL pointer dereference. The vulnerability contributes to denial of service and possible other impacts; it’s part of a set of Flash vulnerabilities addressed in SUSE advisories and other sources. Affe...

CVE-2015-5552

Technical details for CVE-2015-5552 (affected products, root cause, impact, and fixes) are not present in the provided connected documents. Monitor for official disclosures or updates to confirm vulnerability specifics and remediation.

CVE-2015-8066

Technical details are not publicly available in the provided documents for CVE-2015-8066. Monitor for updates.

CVE-2015-8404

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates and official advisories for remediation guidance.

CVE-2015-8455

The CVE-2015-8455 entry concerns Adobe Flash Player versions prior to 18.0.0.268 and 19.x and prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204, the Adobe AIR SDK before 20.0.0.204, and the Adobe AIR SDK & Compiler before 20.0.0.204. The vul...

CVE-2016-1002

Adobe Flash Player and Adobe AIR components are affected by a memory‑corruption vulnerability (CVE-2016-1002) that can lead to arbitrary code execution or a denial of service. The issue is described across multiple CNVD entries as a memory‑corruption vulnerability in Flash Player that could be ex...

CVE-2016-4133

CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...

CVE-2016-4161

Technical details for CVE-2016-4161 are not publicly disclosed in the provided documents. No affected products, versions, vulnerabilities, or fixes are described here. Monitor for updates from the connected sources.

CVE-2016-4166

CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...

CVE-2016-4227

Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2016-7873

CVE-2016-7873 affects Adobe Flash Player prior to 24.0.0.186. A memory corruption vulnerability in the PSDK class related to ad policy functionality could lead to arbitrary code execution. Public documentation in connected advisories confirms this CVE is part of a broader set of Flash vulnerabili...

CVE-2017-3077

CVE-2017-3077 affects Adobe Flash Player PNG image parser. The vulnerability is a memory corruption issue that could lead to arbitrary code execution when exploited against vulnerable builds (Flash Player 25.0.0.171 and earlier). Public exploitation evidence exists (Exploit-DB entry; CIRCL sighti...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2008-1654

CVE-2008-1654 describes an interaction error between Adobe Flash and UPnP services enabling CSRF-style attacks via Flash’s navigateToURL sending a SOAP to a UPnP control point (e.g., changing the DNS server). The vulnerability affects Adobe Flash Player/Flash plugin across multiple platforms as p...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

CVE-2010-2169

Affected software: Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. Root cause/impact: vulnerability causes pointer memory corruption that can lead to a denial of service or, potentially, arbitrary code execution via unspecified vector...

CVE-2010-2174

CVE-2010-2174 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player for 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is an invalid pointer issue related to the newfunction (0x44) operator and is exploitable via unspecified vectors, enabling arbitrary co...

CVE-2011-0572

Technical details for CVE-2011-0572 are not publicly available in the provided documents; monitor for updates.

CVE-2011-0625

Affected software: Adobe Flash Player. Vulnerability: a bounds-checking issue allowing arbitrary code execution via unspecified vectors. Affected versions: before 10.3.181.14 on Windows, macOS, Linux, and Solaris; before 10.3.185.21 on Android. CVE family: includes CVE-2011-0625 (and related CVEs...

CVE-2011-0627

Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.185.21 on Android, are vulnerable to a memory corruption issue. A remote attacker can exploit this by enticing a user to open a specially crafted SWF file , potentially leading to arbitrary ...

CVE-2012-0755

The CVE refers to Adobe Flash Player for Windows, macOS, Linux, Solaris, and Android, where multiple versions are affected. Specifically, Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on desktop platforms; before 11.1.111.6 on Android 2.x/3.x; and before 11.1.115.6 on Android 4.x ar...

CVE-2012-5255

CVE-2012-5255 corresponds to a buffer overflow in Adobe Flash Player (and related AIR components) that allowed arbitrary code execution via unspecified vectors. Connected advisories confirm this family of vulnerabilities and associate it with Flash Player/Adobe Air, with remediation lists and fix...

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...