1084 matches found
CVE-2018-4936
Adobe Flash Player version 29.0.0.113 and earlier contains a heap overflow vulnerability (CVE-2018-4936) that could lead to information disclosure. Evidence from multiple advisories and scanners links this CVE to APSB18-08 and a patch progression up to 29.0.0.140. Practically, exploitation could ...
CVE-2009-3799
CVE-2009-3799 : Integer overflow in Adobe Flash Player (before 10.0.42.34) and Adobe AIR (before 1.5.3) allows remote code execution via a SWF with a large exception_count, triggering memory corruption in Verifier::parseExceptionHandlers. Affected products are Adobe Flash Player/ AIR; Red Hat adv...
CVE-2013-0644
CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...
CVE-2013-1379
Adobe Flash Player and Adobe AIR contain a vulnerability (CVE-2013-1379) where improper initialization of pointer arrays enables remote code execution or memory corruption. Affected versions span Windows/Mac OS X pre-10.3.183.75 and 11.x prior to 11.7.700.169, Linux pre-11.2.202.280, Android 2.x/...
CVE-2014-0551
Technical details for CVE-2014-0551 are not present in the connected documents; no specific product/version/impact/fix information is available beyond the initial description. Monitor for updates.
CVE-2015-0340
CVE-2015-0340 affects Adobe Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134 on Windows/macOS, and before 11.2.202.451 on Linux. The vulnerability allows a remote attacker to bypass file-upload restrictions via unspecified vectors (cross-domain/policy bypass context inferred f...
CVE-2015-3081
CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...
CVE-2015-3130
Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.
CVE-2015-5568
CVE-2015-5568 affects Adobe Flash Player and related AIR components. Public docs confirm this vulnerability is part of the APSB15-23 set and is tied to a vector-length corruption that could enable a denial of service or other impact. Affected software and versions per the sources include: Windows...
CVE-2015-5569
CVE-2015-5569 affects Adobe Flash Player (and related AIR components) via an improper implementation of the Flash broker API, with unspecified impact in the initial description. Public details in connected sources indicate multiple vulnerabilities (APSB15-25) and patches across platforms: Flash P...
CVE-2015-7648
The CVE-2015-7648 entry concerns Adobe Flash Player with a vulnerability described as a remote code execution due to a type confusion in versions prior to 18.0.0.255 (Windows/macOS) and 11.2.202.540 (Linux), with affected 19.x
CVE-2015-8438
CVE-2015-8438 and CVE-2015-8446 describe heap-based buffer overflows in Adobe Flash Player (and related AIR components) with different vectors. CVE-2015-8438 affects Flash Player on Windows/macOS/Linux prior to specific builds (18.0.0.268, 19.x, 20.x before 20.0.0.228; Linux prior to 11.2.202.554...
CVE-2015-8439
CVE-2015-8439 is a type-confusion remote-code-execution flaw in Adobe Flash Player (and AIR components) via getRemote calls. Affected: Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows/macOS; Linux before 11.2.202.554; Adobe AIR before 20.0.0.204 and related SDKs. Cause: t...
CVE-2015-8451
CVE-2015-8451 affects Adobe Flash Player and Adobe AIR suites. The description indicates arbitrary code execution or memory corruption via unspecified vectors in Flash Player versions prior to 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus A...
CVE-2016-0962
CVE-2016-0962 is a memory corruption vulnerability affecting multiple Adobe products. Connected sources confirm exploitable conditions in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/OS X; Linux before 11.2.202.577) and Adobe AIR/AIR SDK before 21.0.0.176. The ...
CVE-2016-1033
Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.
CVE-2016-4160
Technical details about CVE-2016-4160 are not publicly provided in the supplied documents. No affected products, vulnerable components, or remediation are described here. Monitor for updates from official advisories.
CVE-2016-4239
Technical details about CVE-2016-4239 are not publicly available in the provided documents. Monitor for updates.
CVE-2016-4247
Adobe Flash Player contains a race condition vulnerability (CVE-2016-4247) that could lead to information disclosure. Affected versions include Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux. Multiple connected advisories/patches (e...
CVE-2016-7868
Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...
CVE-2017-3078
CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...
CVE-2008-1654
CVE-2008-1654 describes an interaction error between Adobe Flash and UPnP services enabling CSRF-style attacks via Flash’s navigateToURL sending a SOAP to a UPnP control point (e.g., changing the DNS server). The vulnerability affects Adobe Flash Player/Flash plugin across multiple platforms as p...
CVE-2008-1655
CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...
CVE-2009-1870
CVE-2009-1870 is a local sandbox vulnerability in Adobe Flash Player (affecting Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2) that could disclose sensitive information when a SWF is saved to the user’s hard drive. Connected advisories confirm Red Hat and ot...
CVE-2011-0578
Technical details for CVE-2011-0578 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, impact, and remediation specifics.
CVE-2011-0579
Adobe Flash Player (desktop: Windows/Mac/Linux/Solaris; Android prior to 10.3.181.14 desktop and 10.3.185.21 on Android) is affected by CVE-2011-0579, described as information disclosure via unspecified vectors. The connected documents reference multiple Flash vulnerabilities from 2011-05 to 2011...
CVE-2012-5258
CVE-2012-5258 affects Adobe Flash Player and Adobe AIR. The Flash memory corruption allows arbitrary code execution or a denial of service via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.29 and before 11.x; specifically 11.4.402.287+), Linux (before 11.2.202.243+),...
CVE-2012-5261
CVE-2012-5261 affects Adobe Flash Player and Adobe AIR. Affected: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/macOS; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x. Also af...
CVE-2012-5262
CVE-2012-5262 corresponds to a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR, affecting Flash Player on Windows/Mac OS X prior to 11.4.402.287 (and earlier build 10.3.183.29), Linux prior to 11.2.202.243, Android 2.x/3.x prior to 11.1.111.19, and Android 4.x prior to 11.1.115....
CVE-2014-0540
The CVE-2014-0540 entry concerns memory address discovery bypass of ASLR in Adobe Flash Player prior to 13.0.0.241, 14.x before 14.0.0.176 (Windows/macOS), Linux version 11.2.202.400, and Adobe AIR before 14.0.0.178 (Windows/macOS) and before 14.0.0.179 (Android), plus related AIR SDKs. It is des...
CVE-2014-0541
CVE-2014-0541 is listed among Adobe Flash Player vulnerabilities in the OpenVAS-derived GLSA entry (GLSA 201408-05), indicating a bypass of intended access restrictions. The connected sources do not provide detailed technical specifics (affected product/version pairs beyond the general Flash Play...
CVE-2014-0557
CVE-2014-0557 affects Adobe Flash Player (and related AIR components) across Windows, OS X, Linux, and Android/APIs. The vulnerability arises from improper restriction of memory address discovery, enabling bypass of ASLR via unspecified vectors. The CVSS 2.0 base metrics indicate a high-severity,...
CVE-2014-8441
CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...
CVE-2015-0305
CVE-2015-0305 is a type-confusion vulnerability in Adobe Flash Player (and related AIR components) caused by redefinition of host objects via equality, leading to object type inconsistencies and potential arbitrary code execution. Affected products include Flash Player up to 16.x (Windows/macOS) ...
CVE-2015-0306
CVE-2015-0306 is a memory corruption vulnerability in Adobe Flash Player (and related AIR components) addressed in APSB15-01. Connected sources confirm affected products and versions include Flash Player prior to 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and Linux before 1...
CVE-2015-5562
CVE-2015-5562 describes a type confusion vulnerability in Adobe Flash Player that could allow remote code execution. Affected products and versions per the entry: Flash Player prior to 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux; Adobe AIR prior to 18.0.0.199 and older AIR ...
CVE-2015-8822
CVE-2015-8822 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via crafted MPEG-4 data. Affected: Flash Player prior to 18.0.0.268, 19.x prior to 20.0.0.228 (Windows/macOS); Linux prior to 11.2.202.554; Adobe AIR prior to 20.0.0.204; AIR S...
CVE-2016-0979
Technical details for CVE-2016-0979 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified. Monitor for updates from connected EUVD records.
CVE-2016-1022
Technical details for CVE-2016-1022 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, versions, impact, or remediation are included here.
CVE-2016-1031
CVE-2016-1031 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products include Flash Player on Windows/OS X (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The vulnerability arises from a u...
CVE-2016-4114
Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.
CVE-2016-4133
CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...
CVE-2016-4166
CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...
CVE-2016-4221
Technical details about CVE-2016-4221 are not provided in the connected documents; no product/version/impact specifics are available here. Monitor for updates.
CVE-2016-4240
Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.
CVE-2017-3063
CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...
CVE-2018-4933
CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...
CVE-2006-4640
CVE-2006-4640 affects Adobe Flash Player prior to 9.0.16.0. Unspecified vulnerability could allow user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. Connected docs corroborate that this is a Flash Player issue tied to allowScriptAccess bypass; no pu...
CVE-2007-6242
CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...