CVE-2015-5569

CVE-2015-5569 affects Adobe Flash Player (and related AIR components) via an improper implementation of the Flash broker API, with unspecified impact in the initial description. Public details in connected sources indicate multiple vulnerabilities (APSB15-25) and patches across platforms: Flash P...

CVE-2015-7644

Technical details for CVE-2015-7644 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2015-7648

The CVE-2015-7648 entry concerns Adobe Flash Player with a vulnerability described as a remote code execution due to a type confusion in versions prior to 18.0.0.255 (Windows/macOS) and 11.2.202.540 (Linux), with affected 19.x

CVE-2015-8438

CVE-2015-8438 and CVE-2015-8446 describe heap-based buffer overflows in Adobe Flash Player (and related AIR components) with different vectors. CVE-2015-8438 affects Flash Player on Windows/macOS/Linux prior to specific builds (18.0.0.268, 19.x, 20.x before 20.0.0.228; Linux prior to 11.2.202.554...

CVE-2015-8439

CVE-2015-8439 is a type-confusion remote-code-execution flaw in Adobe Flash Player (and AIR components) via getRemote calls. Affected: Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows/macOS; Linux before 11.2.202.554; Adobe AIR before 20.0.0.204 and related SDKs. Cause: t...

CVE-2015-8453

Technical details for CVE-2015-8453 are not publicly provided in the supplied documents; no concrete affected products, versions, or impact are stated here. Monitor for updates.

CVE-2015-8658

Technical details for CVE-2015-8658 are not provided in the supplied documents; public specifics (affected software, impact, fixes) are not available here. Monitor for updates.

CVE-2016-0962

CVE-2016-0962 is a memory corruption vulnerability affecting multiple Adobe products. Connected sources confirm exploitable conditions in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/OS X; Linux before 11.2.202.577) and Adobe AIR/AIR SDK before 21.0.0.176. The ...

CVE-2016-1033

Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.

CVE-2016-4160

Technical details about CVE-2016-4160 are not publicly provided in the supplied documents. No affected products, vulnerable components, or remediation are described here. Monitor for updates from official advisories.

CVE-2016-4239

Technical details about CVE-2016-4239 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4247

Adobe Flash Player contains a race condition vulnerability (CVE-2016-4247) that could lead to information disclosure. Affected versions include Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux. Multiple connected advisories/patches (e...

CVE-2016-7868

Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...

CVE-2017-3061

CVE-2017-3061 is an Adobe Flash Player memory corruption vulnerability in the SWF parser, affecting Flash Player versions 25.0.0.127 and earlier. Exploitation could allow arbitrary code execution, typically via a specially crafted SWF file loaded by a user without interaction. Public representati...

CVE-2017-3078

CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...

CVE-2009-1870

CVE-2009-1870 is a local sandbox vulnerability in Adobe Flash Player (affecting Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2) that could disclose sensitive information when a SWF is saved to the user’s hard drive. Connected advisories confirm Red Hat and ot...

CVE-2009-3799

CVE-2009-3799 : Integer overflow in Adobe Flash Player (before 10.0.42.34) and Adobe AIR (before 1.5.3) allows remote code execution via a SWF with a large exception_count, triggering memory corruption in Verifier::parseExceptionHandlers. Affected products are Adobe Flash Player/ AIR; Red Hat adv...

CVE-2011-0578

Technical details for CVE-2011-0578 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, impact, and remediation specifics.

CVE-2011-0579

Adobe Flash Player (desktop: Windows/Mac/Linux/Solaris; Android prior to 10.3.181.14 desktop and 10.3.185.21 on Android) is affected by CVE-2011-0579, described as information disclosure via unspecified vectors. The connected documents reference multiple Flash vulnerabilities from 2011-05 to 2011...

CVE-2012-5258

CVE-2012-5258 affects Adobe Flash Player and Adobe AIR. The Flash memory corruption allows arbitrary code execution or a denial of service via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.29 and before 11.x; specifically 11.4.402.287+), Linux (before 11.2.202.243+),...

CVE-2012-5261

CVE-2012-5261 affects Adobe Flash Player and Adobe AIR. Affected: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/macOS; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x. Also af...

CVE-2012-5262

CVE-2012-5262 corresponds to a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR, affecting Flash Player on Windows/Mac OS X prior to 11.4.402.287 (and earlier build 10.3.183.29), Linux prior to 11.2.202.243, Android 2.x/3.x prior to 11.1.111.19, and Android 4.x prior to 11.1.115....

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2014-0540

The CVE-2014-0540 entry concerns memory address discovery bypass of ASLR in Adobe Flash Player prior to 13.0.0.241, 14.x before 14.0.0.176 (Windows/macOS), Linux version 11.2.202.400, and Adobe AIR before 14.0.0.178 (Windows/macOS) and before 14.0.0.179 (Android), plus related AIR SDKs. It is des...

CVE-2014-0541

CVE-2014-0541 is listed among Adobe Flash Player vulnerabilities in the OpenVAS-derived GLSA entry (GLSA 201408-05), indicating a bypass of intended access restrictions. The connected sources do not provide detailed technical specifics (affected product/version pairs beyond the general Flash Play...

CVE-2014-0557

CVE-2014-0557 affects Adobe Flash Player (and related AIR components) across Windows, OS X, Linux, and Android/APIs. The vulnerability arises from improper restriction of memory address discovery, enabling bypass of ASLR via unspecified vectors. The CVSS 2.0 base metrics indicate a high-severity,...

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2015-0305

CVE-2015-0305 is a type-confusion vulnerability in Adobe Flash Player (and related AIR components) caused by redefinition of host objects via equality, leading to object type inconsistencies and potential arbitrary code execution. Affected products include Flash Player up to 16.x (Windows/macOS) ...

CVE-2015-0306

CVE-2015-0306 is a memory corruption vulnerability in Adobe Flash Player (and related AIR components) addressed in APSB15-01. Connected sources confirm affected products and versions include Flash Player prior to 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and Linux before 1...

CVE-2015-0340

CVE-2015-0340 affects Adobe Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134 on Windows/macOS, and before 11.2.202.451 on Linux. The vulnerability allows a remote attacker to bypass file-upload restrictions via unspecified vectors (cross-domain/policy bypass context inferred f...

CVE-2015-3130

Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.

CVE-2015-5562

CVE-2015-5562 describes a type confusion vulnerability in Adobe Flash Player that could allow remote code execution. Affected products and versions per the entry: Flash Player prior to 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux; Adobe AIR prior to 18.0.0.199 and older AIR ...

CVE-2015-8451

CVE-2015-8451 affects Adobe Flash Player and Adobe AIR suites. The description indicates arbitrary code execution or memory corruption via unspecified vectors in Flash Player versions prior to 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus A...

CVE-2015-8822

CVE-2015-8822 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via crafted MPEG-4 data. Affected: Flash Player prior to 18.0.0.268, 19.x prior to 20.0.0.228 (Windows/macOS); Linux prior to 11.2.202.554; Adobe AIR prior to 20.0.0.204; AIR S...

CVE-2016-0979

Technical details for CVE-2016-0979 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified. Monitor for updates from connected EUVD records.

CVE-2016-1022

Technical details for CVE-2016-1022 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, versions, impact, or remediation are included here.

CVE-2016-4133

CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...

CVE-2016-4166

CVE-2016-4166 is listed among multiple vulnerabilities fixed by the Adobe Flash Player update to 11.2.202.626 across several distributions (SUSE/openSUSE, Red Hat RHSA-2016:1238, ALT Linux, openSUSE-2016-740/743, OpenBSD/FreeBSD references). The initial entry references Flash Player 21.0.0.242 an...

CVE-2016-4240

Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.

CVE-2017-3063

CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...

CVE-2007-6242

CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...

CVE-2008-1654

CVE-2008-1654 describes an interaction error between Adobe Flash and UPnP services enabling CSRF-style attacks via Flash’s navigateToURL sending a SOAP to a UPnP control point (e.g., changing the DNS server). The vulnerability affects Adobe Flash Player/Flash plugin across multiple platforms as p...

CVE-2008-1655

CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...

CVE-2012-4164

Adobe Flash Player (and AIR) vulnerability CVE-2012-4164 allows arbitrary code execution or memory corruption via unspecified vectors across Windows, Mac OS X, Linux, and Android; affected versions listed in the initial description (pre-10.3.183.23, pre-11.4.402.265 on Windows/Mac; pre-11.2.202.2...

CVE-2012-4168

CVE-2012-4168 is a cross-domain information leak in Adobe Flash Player and Adobe AIR (affecting multiple platforms: Windows, Mac OS X, Linux, Android 2.x/3.x/4.x). It arises from handling specially crafted SWF content, enabling a remote attacker to read content from a different domain. Public adv...

CVE-2012-5257

CVE-2012-5257 is a buffer overflow in Adobe Flash Player (Windows/Mac/Linux/Android) prior to the specified patched versions, and in Adobe AIR prior to 3.4.0.2710. The vulnerability allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.29 ...

CVE-2012-5279

Adobe Flash Player and Adobe AIR are affected by CVE-2012-5279. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.43 and 11.x before 11.5.502.110), Linux (before 10.3.183.43 and 11.x before 11.2.2...

CVE-2013-1374

CVE-2013-1374 = Use-after-free in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR that permits arbitrary code execution via unspecified vectors; affected versions include Flash Player 10.3.x–11.x before listed builds on various platforms and AIR before 3.6.0.x. Patches were released in A...

CVE-2014-0518

Adobe Flash Player vulnerability CVE-2014-0518 (and related CVEs) allows bypass of intended access restrictions via unspecified vectors. Affected products/versions noted in the initial entry: Flash Player for Windows and macOS prior to 13.0.0.214, Flash Player for Linux prior to 11.2.202.359, Ado...

CVE-2014-0519

CVE-2014-0519 describes a sandbox security bypass in Adobe Flash Player and AIR components. The flaw affects Flash Player pre-13.0.0.214 on Windows/macOS and pre-11.2.202.359 on Linux, plus AIR SDK before 13.0.0.111, enabling attackers to bypass access restrictions via crafted files opened by a u...