CVE-2014-0548

Summary (CVE-2014-0548) : Adobe Flash Player (and related AIR SDK packages) contains a vulnerability that could allow a remote bypass of the Same Origin Policy. The Mageia advisory MGASA-2014-0382 notes that Flash Player 11.2.202.406 fixes multiple security issues, including a bypass of the same-...

CVE-2014-0554

CVE-2014-0554 affects Adobe Flash Player and AIR components. The initial entry states a bypass of intended access restrictions via unspecified vectors for: Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 (Windows/OS X) and before 11.2.202.406 (Linux); Flash AIR before 15.0.0.24...

CVE-2015-0325

CVE-2015-0325 affects Adobe Flash Player on Windows, macOS, and Linux (pre-16.0.0.305; Linux pre-11.2.202.442). The root cause is a NULL pointer dereference when processing a crafted SWF, enabling denial of service (per initial) and potentially other impacts. Connected advisories confirm the issu...

CVE-2015-0338

Adobe Flash Player is affected by an integer overflow (CVE-2015-0338) that could lead to remote code execution. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/macOS , and before 11.2.202.451 on Linux . The root cause is an integer overf...

CVE-2015-5568

CVE-2015-5568 affects Adobe Flash Player and related AIR components. Public docs confirm this vulnerability is part of the APSB15-23 set and is tied to a vector-length corruption that could enable a denial of service or other impact. Affected software and versions per the sources include: Windows...

CVE-2015-5581

CVE-2015-5581 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows remote arbitrary-code execution. Affected: Flash Player on Windows, OS X (before 18.0.0.241; before 19.0.0.185 for 19.x), Linux (before 11.2.202.521); Adobe AIR before 19.0.0.190; AIR SD...

CVE-2015-7626

Adobe Flash Player contains a memory corruption vulnerability (CVE-2015-7626) that can lead to arbitrary code execution or a crash via unspecified vectors, affecting Windows/macOS versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207, Linux prior to 11.2.202.535, and Adobe AIR prior to 19.0.0...

CVE-2015-7627

Summary (CVE-2015-7627) : Adobe Flash Player and Adobe AIR components are affected by a memory corruption vulnerability triggered by parsing specially crafted SWF content, potentially allowing remote code execution or memory corruption-based denial of service. The CVE is part of a broader 2015 AP...

CVE-2015-7644

Technical details for CVE-2015-7644 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2015-8415

CVE-2015-8415 (Adobe Flash Player/ AIR) involves a buffer overflow in Flash Player and related AIR packages that could allow arbitrary code execution. The vulnerability affects Flash Player before 18.0.0.268 and 19.x, and before 20.0.0.228 on Windows and macOS, and before 11.2.202.554 on Linux; a...

CVE-2015-8423

Technical details about CVE-2015-8423 (affected products, vulnerable components, exploit vectors, impact) are not publicly available in the provided documents. Monitor for updates and authoritative advisories.

CVE-2015-8438

CVE-2015-8438 and CVE-2015-8446 describe heap-based buffer overflows in Adobe Flash Player (and related AIR components) with different vectors. CVE-2015-8438 affects Flash Player on Windows/macOS/Linux prior to specific builds (18.0.0.268, 19.x, 20.x before 20.0.0.228; Linux prior to 11.2.202.554...

CVE-2015-8452

CVE-2015-8452 is a use-after-free vulnerability in Adobe Flash Player and related runtimes. The initial description states that attackers could execute arbitrary code via unspecified vectors, affecting Adobe Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/OS X, and before...

CVE-2016-0976

Technical details for CVE-2016-0976 are not publicly available in the provided documents. Monitor for updates; no product, version, vector, or impact specifics are included in the connected data.

CVE-2016-0977

Technical details for CVE-2016-0977 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-0985

CVE-2016-0985 is a type-confusion vulnerability in Adobe Flash Player and related AIR components that enables remote code execution. Affected products include Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/OS X, and before 11.2.202.569 on Linux; and AIR before 20.0.0.260...

CVE-2016-0987

Technical details for CVE-2016-0987 are not provided in the connected documents. Monitor for updates.

CVE-2016-4160

Technical details about CVE-2016-4160 are not publicly provided in the supplied documents. No affected products, vulnerable components, or remediation are described here. Monitor for updates from official advisories.

CVE-2016-4231

CVE-2016-4231 is a use-after-free vulnerability in Adobe Flash Player affecting Windows/OS X versions prior to 18.0.0.366 and 19.x–22.x prior to 22.0.0.209, and Linux prior to 11.2.202.632, allowing arbitrary code execution via unspecified vectors. A public exploit exists (exploited) at https://w...

CVE-2016-7881

CVE-2016-7881 affects Adobe Flash Player up to version 23.0.0.207 (and the Linux 11.2.202.644 line) and results in an exploitable use-after-free in the MovieClip class when converting to an object, with the impact of arbitrary code execution. Several connected advisories cite this issue among a b...

CVE-2017-2931

CVE-2017-2931 affects Adobe Flash Player versions 24.0.0.186 and earlier, due to a memory corruption vulnerability in SWF metadata parsing that could allow arbitrary code execution. The issue is corroborated across multiple advisories (e.g., ASA-201701-16/17) which state the impact as remote code...

CVE-2007-6244

Adobe Flash Player (Flash-plugin) vulnerable to cross-site scripting via asfunction: and navigateToURL in the ActiveX/Plug-in context. Affected: Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0. Root cause: input validation issues when processing SWF parameters and asfunction: usage, per RH...

CVE-2009-1863

CVE-2009-1863 refers to an unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and in 10.x before 10.0.32.18, and in Adobe AIR before 1.5.2. It can cause a denial of service (application crash) and may allow arbitrary code execution via unknown vectors, with a note of related privile...

CVE-2010-2172

Technical specifics for CVE-2010-2172 (affected software, root cause, impact, or fix) are not provided in the connected documents; monitor for updates.

CVE-2011-0579

Adobe Flash Player (desktop: Windows/Mac/Linux/Solaris; Android prior to 10.3.181.14 desktop and 10.3.185.21 on Android) is affected by CVE-2011-0579, described as information disclosure via unspecified vectors. The connected documents reference multiple Flash vulnerabilities from 2011-05 to 2011...

CVE-2012-4168

CVE-2012-4168 is a cross-domain information leak in Adobe Flash Player and Adobe AIR (affecting multiple platforms: Windows, Mac OS X, Linux, Android 2.x/3.x/4.x). It arises from handling specially crafted SWF content, enabling a remote attacker to read content from a different domain. Public adv...

CVE-2012-5274

CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...

CVE-2013-1372

Technical details about CVE-2013-1372 are not provided in the supplied documents. Public information available here is limited to the description in the initial entry; no affected products, versions, impact, or fixes are confirmed. Monitor for updates.

CVE-2014-0585

CVE-2014-0585 is a type-confusion vulnerability in Adobe Flash Player that can enable remote code execution. Affected products/versions (as stated in the provided docs) include Flash Player on Windows/macOS prior to 13.0.0.252 and prior to 15.0.0.223 for 14.x/15.x, and Flash Player on Linux prior...

CVE-2014-9164

Adobe Flash Player vulnerability CVE-2014-9164 affects Windows and OS X: Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235, and Linux before 11.2.202.425, allowing attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Root cause involves memo...

CVE-2015-0309

CVE-2015-0309 is a heap-based buffer overflow in Adobe Flash Player prior to 13.0.0.260 and 14.x through 16.x prior to 16.0.0.257 (Windows/OS X) and before 11.2.202.429 (Linux), and in Adobe AIR prior to 16.0.0.245 (Windows/OS X) and before 16.0.0.272 (Android), plus Adobe AIR SDKs before 16.0.0....

CVE-2015-0329

CVE-2015-0329 is a memory corruption vulnerability in Adobe Flash Player (Windows/macOS: before 13.0.0.269 and 14.x up to 16.x before 16.0.0.305; Linux: before 11.2.202.442) that can lead to arbitrary code execution or a crash via unspecified vectors. Connected CIRCL sighting references an Exploi...

CVE-2015-5539

The CVE family (CVE-2015-5539 and related CVEs) describes a use-after-free vulnerability in Adobe Flash Player and associated AIR components. Affected products include Flash Player on Windows, macOS, and Linux, with specific vulnerable versions cited as before 18.0.0.232 (Windows/macOS) and befor...

CVE-2015-5553

CVE-2015-5553 covers multiple Adobe Flash Player and Adobe AIR components with memory corruption leading to arbitrary code execution or denial of service. Affected software includes Flash Player before 18.0.0.232 on Windows/OSX and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (a...

CVE-2015-8412

Technical details for CVE-2015-8412 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-8419

CVE-2015-8419 concerns Adobe Flash Player and related Adobe AIR components. Affected software includes Flash Player prior to 18.0.0.268 and 19.x and 20.x prior to 20.0.0.228 on Windows and OS X, and prior to 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204; and Adobe AIR SDK/Compiler before 20....

CVE-2015-8429

CVE-2015-8429 reports a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/macOS; pre-11.2.202.554 on Linux), as well as Adobe AIR and related SDKs before 20.0.0.204. The issue allows attackers to execute arbitrary code via unspecified ...

CVE-2015-8439

CVE-2015-8439 is a type-confusion remote-code-execution flaw in Adobe Flash Player (and AIR components) via getRemote calls. Affected: Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows/macOS; Linux before 11.2.202.554; Adobe AIR before 20.0.0.204 and related SDKs. Cause: t...

CVE-2015-8822

CVE-2015-8822 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via crafted MPEG-4 data. Affected: Flash Player prior to 18.0.0.268, 19.x prior to 20.0.0.228 (Windows/macOS); Linux prior to 11.2.202.554; Adobe AIR prior to 20.0.0.204; AIR S...

CVE-2016-0971

CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...

CVE-2016-1025

Technical details for CVE-2016-1025 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2016-4181

CVE-2016-4181 affects Adobe Flash Player prior to 18.0.0.366 and older 19.x–22.x before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors; the catastrophe is described as a distinct issue ...

CVE-2016-4220

Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm scope and remediation.

CVE-2016-4228

CVE-2016-4228 describes a use-after-free in Adobe Flash Player prior to 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux, allowing arbitrary code execution via unspecified vectors. Connected sources indicate exploitation activity: exploit-db entr...

CVE-2016-7868

Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...