CVE-2015-5587

CVE-2015-5587 is a stack-based buffer overflow in Adobe Flash Player (Windows/macOS: before 18.0.0.241; 19.x before 19.0.0.185; Linux: before 11.2.202.521) and Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190) that allows arbitrary code execution via unspecified vectors. Connec...

CVE-2015-7639

The CVE-2015-7639 entry describes a use-after-free in Adobe Flash Player (before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and Adobe AIR (before 19.0.0.213, including AIR SDK and SDK & Compiler before 19.0.0.213). This vulnerability allows attackers to e...

CVE-2015-7644

Technical details for CVE-2015-7644 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2015-7648

The CVE-2015-7648 entry concerns Adobe Flash Player with a vulnerability described as a remote code execution due to a type confusion in versions prior to 18.0.0.255 (Windows/macOS) and 11.2.202.540 (Linux), with affected 19.x

CVE-2015-8063

CVE-2015-8063 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. Affected software includes Flash Player before 18.0.0.268 and 19.x, and before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204 and AIR SDK before/SDK & C...

CVE-2015-8429

CVE-2015-8429 reports a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/macOS; pre-11.2.202.554 on Linux), as well as Adobe AIR and related SDKs before 20.0.0.204. The issue allows attackers to execute arbitrary code via unspecified ...

CVE-2015-8438

CVE-2015-8438 and CVE-2015-8446 describe heap-based buffer overflows in Adobe Flash Player (and related AIR components) with different vectors. CVE-2015-8438 affects Flash Player on Windows/macOS/Linux prior to specific builds (18.0.0.268, 19.x, 20.x before 20.0.0.228; Linux prior to 11.2.202.554...

CVE-2016-1025

Technical details for CVE-2016-1025 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-1026

Technical details (affected products, exploited vector, impact, fixes) for CVE-2016-1026 are not provided in the supplied documents; monitor for updates from official sources.

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2016-4161

Technical details for CVE-2016-4161 are not publicly disclosed in the provided documents. No affected products, versions, vulnerabilities, or fixes are described here. Monitor for updates from the connected sources.

CVE-2016-4166

CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...

CVE-2016-4183

CVE-2016-4183 affects Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux. It enables arbitrary code execution or a memory-corruption-based denial of service via unspecified vectors, and is distinct from CVE-2016-4172, -4...

CVE-2016-4243

Technical details (affected product, component, version, root cause, impact) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2016-7878

CVE-2016-7878 affects Adobe Flash Player (PC/Linux) with use-after-free in the PSDK MediaPlayer class, enabling arbitrary code execution. Affected versions: Flash Player 23.0.0.207 and earlier (Windows/other builds indicated in CVE list). Public advisories confirm the flaw and note escalation to ...

CVE-2018-4936

Adobe Flash Player version 29.0.0.113 and earlier contains a heap overflow vulnerability (CVE-2018-4936) that could lead to information disclosure. Evidence from multiple advisories and scanners links this CVE to APSB18-08 and a patch progression up to 29.0.0.140. Practically, exploitation could ...

CVE-2009-1866

The CVE-2009-1866 entry describes a stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and in Flash Player 10.x before 10.0.32.18, plus Adobe AIR before 1.5.2, that could cause a denial of service (crash) or possibly allow arbitrary code execution via unspecified vectors. The conn...

CVE-2011-2451

CVE-2011-2451 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, macOS, Linux, and Solaris, and prior to 11.1.102.59 on Android, plus Adobe AIR before 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors ...

CVE-2011-2457

CVE-2011-2457 corresponds to a stack-based buffer overflow in Adobe Flash Player, affecting versions prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, macOS, Linux, and Solaris, plus prior to 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880. This vulnerability allows arbitrary...

CVE-2012-4164

Adobe Flash Player (and AIR) vulnerability CVE-2012-4164 allows arbitrary code execution or memory corruption via unspecified vectors across Windows, Mac OS X, Linux, and Android; affected versions listed in the initial description (pre-10.3.183.23, pre-11.4.402.265 on Windows/Mac; pre-11.2.202.2...

CVE-2012-5250

Technical details for CVE-2012-5250 are not provided in the supplied documents. Public references list the CVE among Flash Player vulnerabilities, but no specifics (affected products, versions, impact or fixes) are included here. Monitor for updates.

CVE-2012-5258

CVE-2012-5258 affects Adobe Flash Player and Adobe AIR. The Flash memory corruption allows arbitrary code execution or a denial of service via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.29 and before 11.x; specifically 11.4.402.287+), Linux (before 11.2.202.243+),...

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2013-1379

Adobe Flash Player and Adobe AIR contain a vulnerability (CVE-2013-1379) where improper initialization of pointer arrays enables remote code execution or memory corruption. Affected versions span Windows/Mac OS X pre-10.3.183.75 and 11.x prior to 11.7.700.169, Linux pre-11.2.202.280, Android 2.x/...

CVE-2014-0541

CVE-2014-0541 is listed among Adobe Flash Player vulnerabilities in the OpenVAS-derived GLSA entry (GLSA 201408-05), indicating a bypass of intended access restrictions. The connected sources do not provide detailed technical specifics (affected product/version pairs beyond the general Flash Play...

CVE-2014-0557

CVE-2014-0557 affects Adobe Flash Player (and related AIR components) across Windows, OS X, Linux, and Android/APIs. The vulnerability arises from improper restriction of memory address discovery, enabling bypass of ASLR via unspecified vectors. The CVSS 2.0 base metrics indicate a high-severity,...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2015-0308

CVE-2015-0308 is a use-after-free in Adobe Flash Player that enables remote code execution via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Wind...

CVE-2015-8439

CVE-2015-8439 is a type-confusion remote-code-execution flaw in Adobe Flash Player (and AIR components) via getRemote calls. Affected: Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows/macOS; Linux before 11.2.202.554; Adobe AIR before 20.0.0.204 and related SDKs. Cause: t...

CVE-2015-8451

CVE-2015-8451 affects Adobe Flash Player and Adobe AIR suites. The description indicates arbitrary code execution or memory corruption via unspecified vectors in Flash Player versions prior to 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus A...

CVE-2015-8453

Technical details for CVE-2015-8453 are not publicly provided in the supplied documents; no concrete affected products, versions, or impact are stated here. Monitor for updates.

CVE-2015-8822

CVE-2015-8822 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via crafted MPEG-4 data. Affected: Flash Player prior to 18.0.0.268, 19.x prior to 20.0.0.228 (Windows/macOS); Linux prior to 11.2.202.554; Adobe AIR prior to 20.0.0.204; AIR S...

CVE-2016-1031

CVE-2016-1031 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products include Flash Player on Windows/OS X (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The vulnerability arises from a u...

CVE-2016-1033

Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.

CVE-2016-4186

Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux, is affected by CVE-2016-4186 via unspecified vectors, potentially enabling arbitrary code execution or memory corruption. Connected sources do not specify the exact exp...

CVE-2016-4218

Technical details for CVE-2016-4218 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-4233

Technical details about CVE-2016-4233 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories."

CVE-2016-4239

Technical details about CVE-2016-4239 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-3063

CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...

CVE-2018-12826

Adobe Flash Player prior to 30.0.0.154 is affected by CVE-2018-12826, an out-of-bounds read vulnerability that could lead to information disclosure. Affected products include Flash Player components up to version 30.0.0.134 (and related plugin cases noted in APSB18-25). Red Hat’s RHSA-2018:2435 c...

CVE-2018-12828

Adobe Flash Player

CVE-2008-1654

CVE-2008-1654 describes an interaction error between Adobe Flash and UPnP services enabling CSRF-style attacks via Flash’s navigateToURL sending a SOAP to a UPnP control point (e.g., changing the DNS server). The vulnerability affects Adobe Flash Player/Flash plugin across multiple platforms as p...

CVE-2009-3799

CVE-2009-3799 : Integer overflow in Adobe Flash Player (before 10.0.42.34) and Adobe AIR (before 1.5.3) allows remote code execution via a SWF with a large exception_count, triggering memory corruption in Verifier::parseExceptionHandlers. Affected products are Adobe Flash Player/ AIR; Red Hat adv...

CVE-2011-0579

Adobe Flash Player (desktop: Windows/Mac/Linux/Solaris; Android prior to 10.3.181.14 desktop and 10.3.185.21 on Android) is affected by CVE-2011-0579, described as information disclosure via unspecified vectors. The connected documents reference multiple Flash vulnerabilities from 2011-05 to 2011...

CVE-2011-0607

Technical details for CVE-2011-0607 are not provided in the connected documents. The initial description mentions Flash Player before 10.2.152.26 but no concrete affected products or versions. Monitor for updates.

CVE-2011-0620

CVE-2011-0620 affects Adobe Flash Player prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, and prior to 10.3.185.21 on Android. The description indicates attackers could execute arbitrary code or cause a memory corruption via unspecified vectors (distinct from CVE-2011-0619/0621/0622...

CVE-2011-2456

CVE-2011-2456 refers to a buffer overflow in Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (and on Android prior to 11.1.102.59) that allows an attacker to execute arbitrary code via unspecified vectors. Impact is complete compromise of affected host. Mitigation exists: up...

CVE-2012-5252

CVE-2012-5252 affects Adobe Flash Player and Adobe AIR. The vulnerability is described as memory corruption that can allow arbitrary code execution or a denial of service via unspecified vectors. Affected components include Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287...