CVE-2016-1028

Technical details about CVE-2016-1028 are not publicly available in the provided documents; no affected products, versions, root cause, or fixes are specified here. Monitor for updates.

CVE-2016-1032

Technical details about CVE-2016-1032 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2016-4127

CVE-2016-4127 is part of a set of Flash Player vulnerabilities documented across multiple advisories (e.g., APSB16-18) affecting Adobe Flash Player used in Internet Explorer 10/11 and Edge. Connected sources indicate this family includes CVEs such as 2016-4122, 4123, 4124, 4125, 4127, 4128, 4129,...

CVE-2016-4219

CVE-2016-4219 affects Adobe Flash Player before 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS and before 11.2.202.632 on Linux. It allows executing arbitrary code or causing memory corruption via unspecified vectors, distinct from related CVEs listed in the entry. The provided...

CVE-2016-4220

Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm scope and remediation.

CVE-2016-4287

Adobe Flash Player CVE-2016-4287 is an integer overflow vulnerability that allows remote code execution. Affected platforms include Windows and macOS builds prior to 18.0.0.375 and 19.x through 23.x prior to 23.0.0.162, as well as Linux builds prior to 11.2.202.635. The issue is reported alongsid...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2017-3082

CVE-2017-3082 corresponds to a memory corruption vulnerability in Adobe Flash Player’s LocaleID class. Affected product: Adobe Flash Player (oldest affected builds include 25.0.0.171 and earlier). Root cause: memory corruption in the LocaleID handling could allow arbitrary code execution. Impact:...

CVE-2007-6244

Adobe Flash Player (Flash-plugin) vulnerable to cross-site scripting via asfunction: and navigateToURL in the ActiveX/Plug-in context. Affected: Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0. Root cause: input validation issues when processing SWF parameters and asfunction: usage, per RH...

CVE-2009-1866

The CVE-2009-1866 entry describes a stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and in Flash Player 10.x before 10.0.32.18, plus Adobe AIR before 1.5.2, that could cause a denial of service (crash) or possibly allow arbitrary code execution via unspecified vectors. The conn...

CVE-2009-1870

CVE-2009-1870 is a local sandbox vulnerability in Adobe Flash Player (affecting Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2) that could disclose sensitive information when a SWF is saved to the user’s hard drive. Connected advisories confirm Red Hat and ot...

CVE-2009-3799

CVE-2009-3799 : Integer overflow in Adobe Flash Player (before 10.0.42.34) and Adobe AIR (before 1.5.3) allows remote code execution via a SWF with a large exception_count, triggering memory corruption in Verifier::parseExceptionHandlers. Affected products are Adobe Flash Player/ AIR; Red Hat adv...

CVE-2011-0573

Technical details for CVE-2011-0573 are not publicly available in the provided documents; no affected products, root cause, or remediation details are given. Monitor for updates.

CVE-2011-0607

Technical details for CVE-2011-0607 are not provided in the connected documents. The initial description mentions Flash Player before 10.2.152.26 but no concrete affected products or versions. Monitor for updates.

CVE-2011-2429

CVE-2011-2429 affects Adobe Flash Player prior to 10.3.183.10 on Windows/macOS/Linux/Solaris, and prior to 10.3.186.7 on Android. The issue is a security control bypass that could disclose sensitive information via unspecified vectors, implying a partial confidentiality impact. The description in...

CVE-2011-2451

CVE-2011-2451 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, macOS, Linux, and Solaris, and prior to 11.1.102.59 on Android, plus Adobe AIR before 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors ...

CVE-2011-2456

CVE-2011-2456 refers to a buffer overflow in Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (and on Android prior to 11.1.102.59) that allows an attacker to execute arbitrary code via unspecified vectors. Impact is complete compromise of affected host. Mitigation exists: up...

CVE-2012-5255

CVE-2012-5255 corresponds to a buffer overflow in Adobe Flash Player (and related AIR components) that allowed arbitrary code execution via unspecified vectors. Connected advisories confirm this family of vulnerabilities and associate it with Flash Player/Adobe Air, with remediation lists and fix...

CVE-2014-0551

Technical details for CVE-2014-0551 are not present in the connected documents; no specific product/version/impact/fix information is available beyond the initial description. Monitor for updates.

CVE-2014-0585

CVE-2014-0585 is a type-confusion vulnerability in Adobe Flash Player that can enable remote code execution. Affected products/versions (as stated in the provided docs) include Flash Player on Windows/macOS prior to 13.0.0.252 and prior to 15.0.0.223 for 14.x/15.x, and Flash Player on Linux prior...

CVE-2015-0323

CVE-2015-0323 is a heap-based buffer overflow in Adobe Flash Player that allows arbitrary code execution. Affected: Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows/macOS; before 11.2.202.442 on Linux. Root cause: heap buffer overflow; vector unspecified. Remediat...

CVE-2015-0342

CVE-2015-0342 is a use-after-free vulnerability in Adobe Flash Player that can allow remote code execution. Affected products/versions include Flash Player on Windows and OS X prior to 13.0.0.277 and 14.x through 17.x prior to 17.0.0.134, and Linux prior to 11.2.202.451; vectors are unspecified. ...

CVE-2015-3114

CVE-2015-3114 affects Adobe Flash Player and Adobe AIR (as cited in multiple advisories). A security bypass could lead to information disclosure by circumventing access restrictions. Advisories (e.g., SUSE GLSA/NASL entries) indicate this CVE was addressed in Flash Player updates; exact patched v...

CVE-2015-3119

CVE-2015-3119 is a type-confusion bug in Adobe Flash Player (AS2) triggered by a watch on a NetConnection property. When the native code sets a property (e.g., fileList) the watch’s callback redefines the object to a different type (NetStream), causing type confusion and potential misuse of the o...

CVE-2015-3125

CVE-2015-3125 concerns Adobe Flash Player and Adobe AIR components affected by a Same Origin Policy bypass vulnerability described as affecting Flash Player versions before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 for Windows/macOS, and before 11.2.202.481 on Linux, plus Adobe AIR before ...

CVE-2015-3135

CVE-2015-3135 is a vulnerability tied to BIND in BIG-IP products via a DNS64/RPZ interaction. Remote attackers could trigger a denial-of-service by querying AAAA records, due to an inconsistency when DNS64 and RPZ are used together. Affected BIG-IP versions include multiple 11.x–13.x lines with B...

CVE-2015-5539

The CVE family (CVE-2015-5539 and related CVEs) describes a use-after-free vulnerability in Adobe Flash Player and associated AIR components. Affected products include Flash Player on Windows, macOS, and Linux, with specific vulnerable versions cited as before 18.0.0.232 (Windows/macOS) and befor...

CVE-2015-7648

The CVE-2015-7648 entry concerns Adobe Flash Player with a vulnerability described as a remote code execution due to a type confusion in versions prior to 18.0.0.255 (Windows/macOS) and 11.2.202.540 (Linux), with affected 19.x

CVE-2015-8429

CVE-2015-8429 reports a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/macOS; pre-11.2.202.554 on Linux), as well as Adobe AIR and related SDKs before 20.0.0.204. The issue allows attackers to execute arbitrary code via unspecified ...

CVE-2015-8820

CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...

CVE-2016-4131

CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...

CVE-2016-4139

CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...

CVE-2016-4166

CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...

CVE-2016-4186

Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux, is affected by CVE-2016-4186 via unspecified vectors, potentially enabling arbitrary code execution or memory corruption. Connected sources do not specify the exact exp...

CVE-2016-4218

Technical details for CVE-2016-4218 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-4239

Technical details about CVE-2016-4239 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2018-12828

Adobe Flash Player

CVE-2018-4920

Adobe Flash Player

CVE-2008-1655

CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...

CVE-2009-1869

CVE-2009-1869 describes an integer overflow in the ActionScript VM 2 (AVM2) abcFile parser in Adobe Flash Player, exploitable via a large intrf_count value that can dereference an out-of-bounds pointer. Affected: Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2...

CVE-2011-0620

CVE-2011-0620 affects Adobe Flash Player prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, and prior to 10.3.185.21 on Android. The description indicates attackers could execute arbitrary code or cause a memory corruption via unspecified vectors (distinct from CVE-2011-0619/0621/0622...

CVE-2011-2457

CVE-2011-2457 corresponds to a stack-based buffer overflow in Adobe Flash Player, affecting versions prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, macOS, Linux, and Solaris, plus prior to 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880. This vulnerability allows arbitrary...

CVE-2012-4168

CVE-2012-4168 is a cross-domain information leak in Adobe Flash Player and Adobe AIR (affecting multiple platforms: Windows, Mac OS X, Linux, Android 2.x/3.x/4.x). It arises from handling specially crafted SWF content, enabling a remote attacker to read content from a different domain. Public adv...

CVE-2012-5252

CVE-2012-5252 affects Adobe Flash Player and Adobe AIR. The vulnerability is described as memory corruption that can allow arbitrary code execution or a denial of service via unspecified vectors. Affected components include Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287...

CVE-2012-5258

CVE-2012-5258 affects Adobe Flash Player and Adobe AIR. The Flash memory corruption allows arbitrary code execution or a denial of service via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.29 and before 11.x; specifically 11.4.402.287+), Linux (before 11.2.202.243+),...

CVE-2012-5262

CVE-2012-5262 corresponds to a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR, affecting Flash Player on Windows/Mac OS X prior to 11.4.402.287 (and earlier build 10.3.183.29), Linux prior to 11.2.202.243, Android 2.x/3.x prior to 11.1.111.19, and Android 4.x prior to 11.1.115....

CVE-2014-0557

CVE-2014-0557 affects Adobe Flash Player (and related AIR components) across Windows, OS X, Linux, and Android/APIs. The vulnerability arises from improper restriction of memory address discovery, enabling bypass of ASLR via unspecified vectors. The CVSS 2.0 base metrics indicate a high-severity,...

CVE-2015-0302

CVE-2015-0302 affects Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux, as well as Adobe AIR before 16.0.0.245 on Windows/OS X and before 16.0.0.272 on Android, plus AIR SDK before 16.0.0.272 and AIR SDK & Compiler befo...

CVE-2015-0305

CVE-2015-0305 is a type-confusion vulnerability in Adobe Flash Player (and related AIR components) caused by redefinition of host objects via equality, leading to object type inconsistencies and potential arbitrary code execution. Affected products include Flash Player up to 16.x (Windows/macOS) ...