CVE-2010-2174

CVE-2010-2174 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player for 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is an invalid pointer issue related to the newfunction (0x44) operator and is exploitable via unspecified vectors, enabling arbitrary co...

CVE-2011-0571

Adobe Flash Player prior to 10.2.152.26 is listed as vulnerable to CVE-2011-0571, with potential arbitrary code execution or memory corruption via unspecified vectors. The description notes this is a different vulnerability from a set of other CVEs (CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CV...

CVE-2011-2458

CVE-2011-2458 : Adobe Flash Player (and related AIR runtime) versions prior to the patched releases are vulnerable to a cross-domain policy bypass when loaded via Internet Explorer. Affected: Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows/macOS/Linux/Solaris, and before 11...

CVE-2011-2459

CVE-2011-2459 affects Adobe Flash Player and Adobe AIR as summarized in the initial entry. The vulnerability is described as a memory corruption issue that could enable remote code execution or cause a denial of service via unspecified vectors (notably separate from several related CVEs). Affecte...

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2012-0755

The CVE refers to Adobe Flash Player for Windows, macOS, Linux, Solaris, and Android, where multiple versions are affected. Specifically, Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on desktop platforms; before 11.1.111.6 on Android 2.x/3.x; and before 11.1.115.6 on Android 4.x ar...

CVE-2012-4168

CVE-2012-4168 is a cross-domain information leak in Adobe Flash Player and Adobe AIR (affecting multiple platforms: Windows, Mac OS X, Linux, Android 2.x/3.x/4.x). It arises from handling specially crafted SWF content, enabling a remote attacker to read content from a different domain. Public adv...

CVE-2012-5255

CVE-2012-5255 corresponds to a buffer overflow in Adobe Flash Player (and related AIR components) that allowed arbitrary code execution via unspecified vectors. Connected advisories confirm this family of vulnerabilities and associate it with Flash Player/Adobe Air, with remediation lists and fix...

CVE-2012-5262

CVE-2012-5262 corresponds to a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR, affecting Flash Player on Windows/Mac OS X prior to 11.4.402.287 (and earlier build 10.3.183.29), Linux prior to 11.2.202.243, Android 2.x/3.x prior to 11.1.111.19, and Android 4.x prior to 11.1.115....

CVE-2013-3343

Technical details for CVE-2013-3343 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates.

CVE-2014-0537

CVE-2014-0537 affects Adobe Flash Player and related AIR components across Windows, OS X, Linux, and Android. The issue is a security bypass of intended access restrictions, enabling bypass via unspecified vectors (not a code path described in the provided text). Affected versions include Flash P...

CVE-2014-0540

The CVE-2014-0540 entry concerns memory address discovery bypass of ASLR in Adobe Flash Player prior to 13.0.0.241, 14.x before 14.0.0.176 (Windows/macOS), Linux version 11.2.202.400, and Adobe AIR before 14.0.0.178 (Windows/macOS) and before 14.0.0.179 (Android), plus related AIR SDKs. It is des...

CVE-2014-0551

Technical details for CVE-2014-0551 are not present in the connected documents; no specific product/version/impact/fix information is available beyond the initial description. Monitor for updates.

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2015-0342

CVE-2015-0342 is a use-after-free vulnerability in Adobe Flash Player that can allow remote code execution. Affected products/versions include Flash Player on Windows and OS X prior to 13.0.0.277 and 14.x through 17.x prior to 17.0.0.134, and Linux prior to 11.2.202.451; vectors are unspecified. ...

CVE-2015-3081

CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...

CVE-2015-5566

CVE-2015-5566 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR (before 18.0.0.199; AIR SDK before 18.0.0.199; AIR SDK & Compiler before 18.0.0.199) that allows attackers to execute arbitrary code via unspecified...

CVE-2015-8404

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates and official advisories for remediation guidance.

CVE-2015-8431

Technical details for CVE-2015-8431 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-8448

Technical details about CVE-2015-8448 are not publicly provided within the connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2016-0976

Technical details for CVE-2016-0976 are not publicly available in the provided documents. Monitor for updates; no product, version, vector, or impact specifics are included in the connected data.

CVE-2016-0978

CVE-2016-0978 covers multiple Adobe Flash Player versions (Windows, macOS, Linux) before 20.0.0.306 for Flash Player and before 20.0.0.260 for AIR/SDK/SDK & Compiler. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is separate from CVE-2016-0964/...

CVE-2016-1029

Technical details for CVE-2016-1029 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates in the connected EUVD entries and the NVD entry for new details.

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2016-4139

CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...

CVE-2016-4155

CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...

CVE-2016-4163

Technical details about CVE-2016-4163 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the EUVD entries reference malware but do not clarify product/version specifics or vulnerability mechanics.

CVE-2016-4184

Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.

CVE-2016-4241

Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2017-3078

CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2009-1863

CVE-2009-1863 refers to an unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and in 10.x before 10.0.32.18, and in Adobe AIR before 1.5.2. It can cause a denial of service (application crash) and may allow arbitrary code execution via unknown vectors, with a note of related privile...

CVE-2010-2181

Technical details about CVE-2010-2181 (affected product/version/root cause/impact) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2010-2183

CVE-2010-2183 involves an integer overflow in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, and in Adobe AIR prior to 2.0.2.12610. The overflow could allow an attacker to execute arbitrary code via unspecified vectors. This is a distinct issue from CVE-2010-2170 ...

CVE-2011-0624

CVE-2011-0624 affects Adobe Flash Player prior to 10.3.181.14 (Windows, Mac, Linux, Solaris) and before 10.3.185.21 on Android, with the issue described as a bounds-checking vulnerability that can allow arbitrary code execution. Affected components include the Flash Player runtime; exploitation s...

CVE-2011-2429

CVE-2011-2429 affects Adobe Flash Player prior to 10.3.183.10 on Windows/macOS/Linux/Solaris, and prior to 10.3.186.7 on Android. The issue is a security control bypass that could disclose sensitive information via unspecified vectors, implying a partial confidentiality impact. The description in...

CVE-2011-2450

Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows, macOS, Linux, Solaris) and prior to 11.1.102.59 on Android; Adobe AIR prior to 3.1.0.4880 is affected by CVE-2011-2450, causing arbitrary code execution or memory corruption leading to DoS. Root cause described as mem...

CVE-2011-2460

CVE-2011-2460 concerns multiple memory-corruption vulnerabilities in Adobe Flash Player (Windows, macOS, Linux, Solaris) and Adobe AIR, allowing arbitrary code execution or denial of service via unspecified vectors. The description in the initial record identifies affected versions as Flash Playe...

CVE-2013-1374

CVE-2013-1374 = Use-after-free in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR that permits arbitrary code execution via unspecified vectors; affected versions include Flash Player 10.3.x–11.x before listed builds on various platforms and AIR before 3.6.0.x. Patches were released in A...

CVE-2014-9164

Adobe Flash Player vulnerability CVE-2014-9164 affects Windows and OS X: Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235, and Linux before 11.2.202.425, allowing attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Root cause involves memo...

CVE-2015-0302

CVE-2015-0302 affects Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux, as well as Adobe AIR before 16.0.0.245 on Windows/OS X and before 16.0.0.272 on Android, plus AIR SDK before 16.0.0.272 and AIR SDK & Compiler befo...

CVE-2015-0305

CVE-2015-0305 is a type-confusion vulnerability in Adobe Flash Player (and related AIR components) caused by redefinition of host objects via equality, leading to object type inconsistencies and potential arbitrary code execution. Affected products include Flash Player up to 16.x (Windows/macOS) ...

CVE-2015-0306

CVE-2015-0306 is a memory corruption vulnerability in Adobe Flash Player (and related AIR components) addressed in APSB15-01. Connected sources confirm affected products and versions include Flash Player prior to 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and Linux before 1...

CVE-2015-0323

CVE-2015-0323 is a heap-based buffer overflow in Adobe Flash Player that allows arbitrary code execution. Affected: Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows/macOS; before 11.2.202.442 on Linux. Root cause: heap buffer overflow; vector unspecified. Remediat...

CVE-2015-0338

Adobe Flash Player is affected by an integer overflow (CVE-2015-0338) that could lead to remote code execution. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/macOS , and before 11.2.202.451 on Linux . The root cause is an integer overf...

CVE-2015-0340

CVE-2015-0340 affects Adobe Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134 on Windows/macOS, and before 11.2.202.451 on Linux. The vulnerability allows a remote attacker to bypass file-upload restrictions via unspecified vectors (cross-domain/policy bypass context inferred f...

CVE-2015-5539

The CVE family (CVE-2015-5539 and related CVEs) describes a use-after-free vulnerability in Adobe Flash Player and associated AIR components. Affected products include Flash Player on Windows, macOS, and Linux, with specific vulnerable versions cited as before 18.0.0.232 (Windows/macOS) and befor...

CVE-2015-5553

CVE-2015-5553 covers multiple Adobe Flash Player and Adobe AIR components with memory corruption leading to arbitrary code execution or denial of service. Affected software includes Flash Player before 18.0.0.232 on Windows/OSX and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (a...

CVE-2015-5568

CVE-2015-5568 affects Adobe Flash Player and related AIR components. Public docs confirm this vulnerability is part of the APSB15-23 set and is tied to a vector-length corruption that could enable a denial of service or other impact. Affected software and versions per the sources include: Windows...