CVE-2011-2458

CVE-2011-2458 : Adobe Flash Player (and related AIR runtime) versions prior to the patched releases are vulnerable to a cross-domain policy bypass when loaded via Internet Explorer. Affected: Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows/macOS/Linux/Solaris, and before 11...

CVE-2014-0503

CVE-2014-0503 affects Adobe Flash Player; versions prior to 11.7.700.272 (and 11.8.x through 12.0.x before 12.0.0.77) on Windows/macOS and pre-11.2.202.346 on Linux are vulnerable to bypassing the Same Origin Policy via unspecified vectors. Affected users should upgrade to Flash Player 11.2.202.3...

CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2014-9164

Adobe Flash Player vulnerability CVE-2014-9164 affects Windows and OS X: Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235, and Linux before 11.2.202.425, allowing attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Root cause involves memo...

CVE-2015-0319

Adobe Flash Player: CVE-2015-0319 is a type confusion-based code execution vulnerability. Affected versions include Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux. The issue is triggered by processing a malformed SWF fi...

CVE-2015-0325

CVE-2015-0325 affects Adobe Flash Player on Windows, macOS, and Linux (pre-16.0.0.305; Linux pre-11.2.202.442). The root cause is a NULL pointer dereference when processing a crafted SWF, enabling denial of service (per initial) and potentially other impacts. Connected advisories confirm the issu...

CVE-2015-3121

Technical details (affected products/versions/attack vectors) for CVE-2015-3121 are not publicly provided in the supplied documents. Monitor for updated advisories or vendor bulletins to confirm affected components and fixes.

CVE-2015-4429

Adobe Flash Player (Windows, OS X, Linux) and related AIR components are affected by CVE-2015-4429, a NULL pointer dereference vulnerability. The issue arises when parsing crafted SWF/FLV content, potentially enabling denial of service and other unspecified impact. Affected versions included Flas...

CVE-2015-5561

CVE-2015-5561 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components that potentially allows remote code execution. Affected products and versions (per the description) include: Flash Player before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux;...

CVE-2015-5565

Technical details for CVE-2015-5565 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-6677

Technical details about CVE-2015-6677 are not provided in the connected documents. The supplied sources do not reveal affected products, vulnerable components, exploit information, or remediation. Monitor for updates and await published technical specifics.

CVE-2015-7626

Adobe Flash Player contains a memory corruption vulnerability (CVE-2015-7626) that can lead to arbitrary code execution or a crash via unspecified vectors, affecting Windows/macOS versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207, Linux prior to 11.2.202.535, and Adobe AIR prior to 19.0.0...

CVE-2015-7627

Summary (CVE-2015-7627) : Adobe Flash Player and Adobe AIR components are affected by a memory corruption vulnerability triggered by parsing specially crafted SWF content, potentially allowing remote code execution or memory corruption-based denial of service. The CVE is part of a broader 2015 AP...

CVE-2015-8404

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates and official advisories for remediation guidance.

CVE-2015-8431

Technical details for CVE-2015-8431 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...

CVE-2015-8441

Technical details for CVE-2015-8441 are not publicly provided in the supplied documents; no product/vendor/version information or remediation is described here. Monitor for updates as connected EUVD records reference malware but do not provide vulnerability specifics.

CVE-2015-8448

Technical details about CVE-2015-8448 are not publicly provided within the connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2015-8455

The CVE-2015-8455 entry concerns Adobe Flash Player versions prior to 18.0.0.268 and 19.x and prior to 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204, the Adobe AIR SDK before 20.0.0.204, and the Adobe AIR SDK & Compiler before 20.0.0.204. The vul...

CVE-2015-8638

Technical details for CVE-2015-8638 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8641

Technical details for CVE-2015-8641 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0976

Technical details for CVE-2016-0976 are not publicly available in the provided documents. Monitor for updates; no product, version, vector, or impact specifics are included in the connected data.

CVE-2016-0977

Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-0978

CVE-2016-0978 covers multiple Adobe Flash Player versions (Windows, macOS, Linux) before 20.0.0.306 for Flash Player and before 20.0.0.260 for AIR/SDK/SDK & Compiler. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is separate from CVE-2016-0964/...

CVE-2016-0985

CVE-2016-0985 is a type-confusion vulnerability in Adobe Flash Player and related AIR components that enables remote code execution. Affected products include Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/OS X, and before 11.2.202.569 on Linux; and AIR before 20.0.0.260...

CVE-2016-0989

Adobe Flash Player and Adobe AIR are affected by CVE-2016-0989 due to a memory corruption vulnerability that could enable arbitrary code execution or memory corruption-based denial of service. Affected products and versions include: Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0...

CVE-2016-0992

CVE-2016-0992 affects Adobe Flash Player before 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/OS X, and before 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and related AIR SDK/Compiler). The connected CNVD entries corroborate a memory‑corruption vulnerability in Adobe Fl...

CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-1032

Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2016-4190

Technical details for CVE-2016-4190 are not publicly available in the provided documents. The connected EUVD entries do not specify affected products, root cause, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2016-4235

Technical details about CVE-2016-4235 are not provided in the submitted documents; no affected products, root cause, or remediation are listed. Monitor for updates from official advisories.

CVE-2016-4241

Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...

CVE-2016-4243

Technical details (affected product, component, version, root cause, impact) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2009-1866

The CVE-2009-1866 entry describes a stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and in Flash Player 10.x before 10.0.32.18, plus Adobe AIR before 1.5.2, that could cause a denial of service (crash) or possibly allow arbitrary code execution via unspecified vectors. The conn...

CVE-2009-1869

CVE-2009-1869 describes an integer overflow in the ActionScript VM 2 (AVM2) abcFile parser in Adobe Flash Player, exploitable via a large intrf_count value that can dereference an out-of-bounds pointer. Affected: Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2...

CVE-2010-2181

Technical details about CVE-2010-2181 (affected product/version/root cause/impact) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2010-2183

CVE-2010-2183 involves an integer overflow in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, and in Adobe AIR prior to 2.0.2.12610. The overflow could allow an attacker to execute arbitrary code via unspecified vectors. This is a distinct issue from CVE-2010-2170 ...

CVE-2011-0578

Technical details for CVE-2011-0578 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, impact, and remediation specifics.

CVE-2011-0624

CVE-2011-0624 affects Adobe Flash Player prior to 10.3.181.14 (Windows, Mac, Linux, Solaris) and before 10.3.185.21 on Android, with the issue described as a bounds-checking vulnerability that can allow arbitrary code execution. Affected components include the Flash Player runtime; exploitation s...

CVE-2011-2456

CVE-2011-2456 refers to a buffer overflow in Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (and on Android prior to 11.1.102.59) that allows an attacker to execute arbitrary code via unspecified vectors. Impact is complete compromise of affected host. Mitigation exists: up...

CVE-2013-1368

CVE-2013-1368 describes a buffer overflow in multiple Adobe runtimes (Flash Player and Adobe AIR) that permits arbitrary code execution via unspecified vectors. Affected: Windows, Mac OS X, Linux, Android; specific version ranges include Flash Player before 10.3.183.63 and 11.x before 11.6.602.16...

CVE-2013-1372

Technical details about CVE-2013-1372 are not provided in the supplied documents. Public information available here is limited to the description in the initial entry; no affected products, versions, impact, or fixes are confirmed. Monitor for updates.

CVE-2013-1373

The CVE-2013-1373 entry concerns a buffer overflow in Adobe Flash Player prior to specific 10.3.183.63/11.x builds and in Adobe AIR prior to 3.6.0.597/3.6.0.599, across Windows, macOS, Linux, Android 2.x–4.x, and AIR SDK. The issue allows arbitrary code execution via unspecified vectors and is de...

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2015-0329

CVE-2015-0329 is a memory corruption vulnerability in Adobe Flash Player (Windows/macOS: before 13.0.0.269 and 14.x up to 16.x before 16.0.0.305; Linux: before 11.2.202.442) that can lead to arbitrary code execution or a crash via unspecified vectors. Connected CIRCL sighting references an Exploi...

CVE-2015-3081

CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...

CVE-2015-3116

Note: Technical details about CVE-2015-3116 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-3125

CVE-2015-3125 concerns Adobe Flash Player and Adobe AIR components affected by a Same Origin Policy bypass vulnerability described as affecting Flash Player versions before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 for Windows/macOS, and before 11.2.202.481 on Linux, plus Adobe AIR before ...