CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2015-8656

Technical details for CVE-2015-8656 are not publicly available in the provided documents. Monitor for updates; no explicit affected products, versions, or remediation information are presented here.

CVE-2016-0971

CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...

CVE-2016-1016

CVE-2016-1016 is a use-after-free in Adobe Flash Player’s Transform object implementation. Affected versions include Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows/OS X, and before 11.2.202.616 on Linux. The root cause is a use-after-free triggered via a flash.g...

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-4220

Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm scope and remediation.

CVE-2017-2931

CVE-2017-2931 affects Adobe Flash Player versions 24.0.0.186 and earlier, due to a memory corruption vulnerability in SWF metadata parsing that could allow arbitrary code execution. The issue is corroborated across multiple advisories (e.g., ASA-201701-16/17) which state the impact as remote code...

CVE-2006-3311

CVE-2006-3311 describes a buffer overflow in Adobe Flash Player 8.0.24.0 and earlier (including Flash Pro 8, Flash MX 2004, and Flex 1.5) that could allow a user-assisted remote attacker to execute arbitrary code via a long, dynamically created SWF string. Connected advisories confirm this is a r...

CVE-2009-1865

CVE-2009-1865 affects Adobe Flash Player prior to 9.0.246.0, Flash Player for 10.x prior to 10.0.32.18, and Adobe AIR prior to 1.5.2, via a null pointer vulnerability that could cause application crash and potentially allow arbitrary code execution. The connected advisories indicate a Flash Playe...

CVE-2010-2189

CVE-2010-2189 involves Adobe Flash Player (first part: 9.0.277.0 and 10.x prior to 10.1.53.64) and Adobe AIR (before 2.0.2.12610) when used with VMware Tools on VMware, leading to memory corruption with potential arbitrary code execution and a possible denial of service. Connected sources confirm...

CVE-2011-0578

Technical details for CVE-2011-0578 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, impact, and remediation specifics.

CVE-2011-0618

CVE-2011-0618 : Integer overflow in Adobe Flash Player before 10.3.181.14 (Windows, macOS, Linux, Solaris) and before 10.3.185.21 on Android allows arbitrary code execution via unspecified vectors. Affected versions are Flash Player prior to these builds; vulnerable component/function not detaile...

CVE-2011-0625

Affected software: Adobe Flash Player. Vulnerability: a bounds-checking issue allowing arbitrary code execution via unspecified vectors. Affected versions: before 10.3.181.14 on Windows, macOS, Linux, and Solaris; before 10.3.185.21 on Android. CVE family: includes CVE-2011-0625 (and related CVEs...

CVE-2011-2455

CVE-2011-2455 affects Adobe Flash Player and Adobe AIR with memory corruption flaws that can lead to arbitrary code execution or denial of service. Affected versions include Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 (and Android/other platforms as specified), with fixes delivere...

CVE-2012-5263

CVE-2012-5263 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR prior to the listed build versions, enabling arbitrary code execution or memory corruption via unspecified vectors. Affected Flash Player versions: Windows/macOS before 10.3.183.29 and 11.x before 11.4.402.287; Linux bef...

CVE-2012-5264

CVE-2012-5264 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. Affected products/versions (per initial description): Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; Flash Pla...

CVE-2012-5277

Adobe Flash Player and Adobe AIR contain a buffer overflow vulnerability (CVE-2012-5277) that allows arbitrary code execution via unspecified vectors. Affected: Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/macOS; Flash before 10.3.183.43 and 11.x before 11.2.202.251 on ...

CVE-2013-0649

CVE-2013-0649 describes a use-after-free in Adobe Flash Player (multiple platforms: Windows, macOS, Linux) and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player up to 10.3.183.63 and 11.x before 11.6.602.168 on Windows; 10.3.183.61 and ...

CVE-2013-1369

Technical details for CVE-2013-1369 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-1373

The CVE-2013-1373 entry concerns a buffer overflow in Adobe Flash Player prior to specific 10.3.183.63/11.x builds and in Adobe AIR prior to 3.6.0.597/3.6.0.599, across Windows, macOS, Linux, Android 2.x–4.x, and AIR SDK. The issue allows arbitrary code execution via unspecified vectors and is de...

CVE-2014-0538

CVE-2014-0538 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that could allow arbitrary code execution. According to the initial entry, it affects Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and macOS, and before 11.2.202.400 on Linux...

CVE-2014-0585

CVE-2014-0585 is a type-confusion vulnerability in Adobe Flash Player that can enable remote code execution. Affected products/versions (as stated in the provided docs) include Flash Player on Windows/macOS prior to 13.0.0.252 and prior to 15.0.0.223 for 14.x/15.x, and Flash Player on Linux prior...

CVE-2014-9162

CVE-2014-9162 affects Adobe Flash Player prior to 13.0.0.259 and, for 14.x through 16.x, prior to 16.0.0.235 on Windows/macOS, and prior to 11.2.202.425 on Linux. The vulnerability, described as an information-disclosure issue, could allow a remote attacker to obtain sensitive information via uns...

CVE-2015-0329

CVE-2015-0329 is a memory corruption vulnerability in Adobe Flash Player (Windows/macOS: before 13.0.0.269 and 14.x up to 16.x before 16.0.0.305; Linux: before 11.2.202.442) that can lead to arbitrary code execution or a crash via unspecified vectors. Connected CIRCL sighting references an Exploi...

CVE-2015-3125

CVE-2015-3125 concerns Adobe Flash Player and Adobe AIR components affected by a Same Origin Policy bypass vulnerability described as affecting Flash Player versions before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 for Windows/macOS, and before 11.2.202.481 on Linux, plus Adobe AIR before ...

CVE-2015-3130

Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.

CVE-2015-4431

CVE-2015-4431 is described in connected advisories as Adobe Flash Player null pointer dereference (APSB15-19) triggered by processing a malformed SWF, enabling remote code execution via a crafted file. The advisory confirms remote exploitation potential; no specific affected versions are provided...

CVE-2015-5559

CVE-2015-5559 is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: prior to 18.0.0.232; Linux: prior to 11.2.202.508) and in Adobe AIR/Adobe AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. Root cause is a use-after-free in handling of SWF c...

CVE-2015-8050

Technical details about CVE-2015-8050 are not provided in the connected documents. Monitor for updates.

CVE-2015-8408

Technical details for CVE-2015-8408 are not provided in the connected documents. No specific affected products, versions, impact, or fixes are listed here. Monitor for updates.

CVE-2015-8409

Adobe Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 (Windows/macOS) and prior to 11.2.202.554 (Linux), Adobe AIR prior to 20.0.0.204, Adobe AIR SDK prior to 20.0.0.204, and Adobe AIR SDK & Compiler prior to 20.0.0.204 are affected by CVE-2015-8409, which allows bypassing ...

CVE-2015-8415

CVE-2015-8415 (Adobe Flash Player/ AIR) involves a buffer overflow in Flash Player and related AIR packages that could allow arbitrary code execution. The vulnerability affects Flash Player before 18.0.0.268 and 19.x, and before 20.0.0.228 on Windows and macOS, and before 11.2.202.554 on Linux; a...

CVE-2015-8435

Technical details for CVE-2015-8435 are not publicly available in the provided documents. Connected EUVD entries describe malware references but do not specify affected products, versions, or root cause. Monitor for updates from official advisories.

CVE-2015-8452

CVE-2015-8452 is a use-after-free vulnerability in Adobe Flash Player and related runtimes. The initial description states that attackers could execute arbitrary code via unspecified vectors, affecting Adobe Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/OS X, and before...

CVE-2015-8455

The CVE-2015-8455 entry concerns Adobe Flash Player versions prior to 18.0.0.268 and 19.x and prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204, the Adobe AIR SDK before 20.0.0.204, and the Adobe AIR SDK & Compiler before 20.0.0.204. The vul...

CVE-2016-0977

Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-0985

CVE-2016-0985 is a type-confusion vulnerability in Adobe Flash Player and related AIR components that enables remote code execution. Affected products include Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/OS X, and before 11.2.202.569 on Linux; and AIR before 20.0.0.260...

CVE-2016-0987

Technical details for CVE-2016-0987 are not provided in the connected documents. Monitor for updates.

CVE-2016-0992

CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...

CVE-2016-1002

Adobe Flash Player and Adobe AIR components are affected by a memory‑corruption vulnerability (CVE-2016-1002) that can lead to arbitrary code execution or a denial of service. The issue is described across multiple CNVD entries as a memory‑corruption vulnerability in Flash Player that could be ex...

CVE-2016-4131

CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...

CVE-2016-4190

Technical details for CVE-2016-4190 are not publicly available in the provided documents. The connected EUVD entries do not specify affected products, root cause, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2016-4219

CVE-2016-4219 affects Adobe Flash Player before 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS and before 11.2.202.632 on Linux. It allows executing arbitrary code or causing memory corruption via unspecified vectors, distinct from related CVEs listed in the entry. The provided...

CVE-2016-4227

Technical details about CVE-2016-4227 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2016-4228

CVE-2016-4228 describes a use-after-free in Adobe Flash Player prior to 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux, allowing arbitrary code execution via unspecified vectors. Connected sources indicate exploitation activity: exploit-db entr...

CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-4235

Technical details about CVE-2016-4235 are not provided in the submitted documents; no affected products, root cause, or remediation are listed. Monitor for updates from official advisories.

CVE-2016-4286

CVE-2016-4286 is a security bypass vulnerability in Adobe Flash Player affecting Windows/macOS (pre-18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). The exposed issue allows bypass of intended access restrictions via unspecified vectors. Connected advisories confirm it...

CVE-2016-7868

Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...

CVE-2016-7881

CVE-2016-7881 affects Adobe Flash Player up to version 23.0.0.207 (and the Linux 11.2.202.644 line) and results in an exploitable use-after-free in the MovieClip class when converting to an object, with the impact of arbitrary code execution. Several connected advisories cite this issue among a b...