CVE-2011-2458

CVE-2011-2458 : Adobe Flash Player (and related AIR runtime) versions prior to the patched releases are vulnerable to a cross-domain policy bypass when loaded via Internet Explorer. Affected: Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows/macOS/Linux/Solaris, and before 11...

CVE-2016-7869

CVE-2016-7869 refers to an exploitable buffer overflow/underflow in Adobe Flash Player (versions <= 23.0.0.207 on Windows,

CVE-2016-7875

CVE-2016-7875 affects Adobe Flash Player up to version 23.0.0.207 (Windows/Linux) and 11.2.202.644 (Flash Player). Root cause: an exploitable integer overflow in BitmapData. Impact: remote code execution could be achieved by a successful exploit. Public advisories show multiple related CVEs and p...

CVE-2018-4936

Adobe Flash Player version 29.0.0.113 and earlier contains a heap overflow vulnerability (CVE-2018-4936) that could lead to information disclosure. Evidence from multiple advisories and scanners links this CVE to APSB18-08 and a patch progression up to 29.0.0.140. Practically, exploitation could ...

CVE-2006-3311

CVE-2006-3311 describes a buffer overflow in Adobe Flash Player 8.0.24.0 and earlier (including Flash Pro 8, Flash MX 2004, and Flex 1.5) that could allow a user-assisted remote attacker to execute arbitrary code via a long, dynamically created SWF string. Connected advisories confirm this is a r...

CVE-2009-1865

CVE-2009-1865 affects Adobe Flash Player prior to 9.0.246.0, Flash Player for 10.x prior to 10.0.32.18, and Adobe AIR prior to 1.5.2, via a null pointer vulnerability that could cause application crash and potentially allow arbitrary code execution. The connected advisories indicate a Flash Playe...

CVE-2009-3799

CVE-2009-3799 : Integer overflow in Adobe Flash Player (before 10.0.42.34) and Adobe AIR (before 1.5.3) allows remote code execution via a SWF with a large exception_count, triggering memory corruption in Verifier::parseExceptionHandlers. Affected products are Adobe Flash Player/ AIR; Red Hat adv...

CVE-2011-0578

Technical details for CVE-2011-0578 are not publicly available in the provided documents. Monitor for updates in connected sources for affected products, impact, and remediation specifics.

CVE-2011-2429

CVE-2011-2429 affects Adobe Flash Player prior to 10.3.183.10 on Windows/macOS/Linux/Solaris, and prior to 10.3.186.7 on Android. The issue is a security control bypass that could disclose sensitive information via unspecified vectors, implying a partial confidentiality impact. The description in...

CVE-2011-2451

CVE-2011-2451 affects Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, macOS, Linux, and Solaris, and prior to 11.1.102.59 on Android, plus Adobe AIR before 3.1.0.4880. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors ...

CVE-2011-2456

CVE-2011-2456 refers to a buffer overflow in Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (and on Android prior to 11.1.102.59) that allows an attacker to execute arbitrary code via unspecified vectors. Impact is complete compromise of affected host. Mitigation exists: up...

CVE-2012-5250

Technical details for CVE-2012-5250 are not provided in the supplied documents. Public references list the CVE among Flash Player vulnerabilities, but no specifics (affected products, versions, impact or fixes) are included here. Monitor for updates.

CVE-2012-5261

CVE-2012-5261 affects Adobe Flash Player and Adobe AIR. Affected: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/macOS; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x. Also af...

CVE-2012-5279

Adobe Flash Player and Adobe AIR are affected by CVE-2012-5279. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.43 and 11.x before 11.5.502.110), Linux (before 10.3.183.43 and 11.x before 11.2.2...

CVE-2013-1369

Technical details for CVE-2013-1369 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-8441

CVE-2014-8441 is a memory corruption vulnerability in Adobe Flash Player that allowed remote code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/macOS, and before 11.2.202.418 on Linux, plus Ad...

CVE-2015-0306

CVE-2015-0306 is a memory corruption vulnerability in Adobe Flash Player (and related AIR components) addressed in APSB15-01. Connected sources confirm affected products and versions include Flash Player prior to 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and Linux before 1...

CVE-2015-3130

Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.

CVE-2015-5559

CVE-2015-5559 is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: prior to 18.0.0.232; Linux: prior to 11.2.202.508) and in Adobe AIR/Adobe AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. Root cause is a use-after-free in handling of SWF c...

CVE-2015-5575

Technical details for CVE-2015-5575 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-8408

Technical details for CVE-2015-8408 are not provided in the connected documents. No specific affected products, versions, impact, or fixes are listed here. Monitor for updates.

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...

CVE-2016-0962

CVE-2016-0962 is a memory corruption vulnerability affecting multiple Adobe products. Connected sources confirm exploitable conditions in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/OS X; Linux before 11.2.202.577) and Adobe AIR/AIR SDK before 21.0.0.176. The ...

CVE-2016-1022

Technical details for CVE-2016-1022 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, versions, impact, or remediation are included here.

CVE-2016-1026

Technical details (affected products, exploited vector, impact, fixes) for CVE-2016-1026 are not provided in the supplied documents; monitor for updates from official sources.

CVE-2016-1029

Technical details for CVE-2016-1029 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates in the connected EUVD entries and the NVD entry for new details.

CVE-2016-1033

Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.

CVE-2016-4184

Technical details about CVE-2016-4184 are not publicly provided in the supplied documents. Monitor for updates; the connected EUVD entries do not supply product/version-specific vulnerability data for this CVE.

CVE-2016-4190

Technical details for CVE-2016-4190 are not publicly available in the provided documents. The connected EUVD entries do not specify affected products, root cause, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2016-4219

CVE-2016-4219 affects Adobe Flash Player before 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS and before 11.2.202.632 on Linux. It allows executing arbitrary code or causing memory corruption via unspecified vectors, distinct from related CVEs listed in the entry. The provided...

CVE-2016-4241

Adobe Flash Player pre-18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux, is affected by CVE-2016-4241. The vulnerability allows arbitrary code execution or memory-corruption-based denial of service via unspecified vectors (distinct from CVE-2016-4172/41...

CVE-2016-4243

Technical details (affected product, component, version, root cause, impact) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-4247

Adobe Flash Player contains a race condition vulnerability (CVE-2016-4247) that could lead to information disclosure. Affected versions include Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux. Multiple connected advisories/patches (e...

CVE-2017-3078

CVE-2017-3078 is a memory corruption vulnerability in the ATF (Adobe Texture Format) module of Adobe Flash Player, affecting versions up to 25.0.0.171 and earlier. Successful exploitation could lead to arbitrary code execution with remote, unprivileged access and no user interaction required. Pub...

CVE-2007-6242

CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...

CVE-2009-1866

The CVE-2009-1866 entry describes a stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and in Flash Player 10.x before 10.0.32.18, plus Adobe AIR before 1.5.2, that could cause a denial of service (crash) or possibly allow arbitrary code execution via unspecified vectors. The conn...

CVE-2009-1870

CVE-2009-1870 is a local sandbox vulnerability in Adobe Flash Player (affecting Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2) that could disclose sensitive information when a SWF is saved to the user’s hard drive. Connected advisories confirm Red Hat and ot...

CVE-2011-0607

Technical details for CVE-2011-0607 are not provided in the connected documents. The initial description mentions Flash Player before 10.2.152.26 but no concrete affected products or versions. Monitor for updates.

CVE-2012-5248

CVE-2012-5248 describes a buffer overflow in Adobe Flash Player (affecting Windows, Mac, Linux, Android) prior to the listed fixed versions (e.g., Flash Player 10.3.183.29/11.x up to 11.4.402.287 on desktop, 11.2.202.243 on some Linux/OpenSUSE advisories, 11.1.111.19/11.1.115.20 on Android) and A...

CVE-2012-5258

CVE-2012-5258 affects Adobe Flash Player and Adobe AIR. The Flash memory corruption allows arbitrary code execution or a denial of service via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.29 and before 11.x; specifically 11.4.402.287+), Linux (before 11.2.202.243+),...

CVE-2013-0649

CVE-2013-0649 describes a use-after-free in Adobe Flash Player (multiple platforms: Windows, macOS, Linux) and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player up to 10.3.183.63 and 11.x before 11.6.602.168 on Windows; 10.3.183.61 and ...

CVE-2013-3327

Technical details for CVE-2013-3327 are not publicly available in the provided connected documents. Please monitor for updates from official advisories; current sources here reference multiple related CVEs but provide no implementation specifics.

CVE-2013-3332

Technical details are not publicly available in the provided documents. Monitor for updates from the sources; no specific affected products, versions, or fixes are disclosed here.

CVE-2014-0555

Technical details about CVE-2014-0555 are not provided in the supplied documents. Monitor for updates from official advisories; no affected products, vectors, or fixes are specified here.

CVE-2015-0328

Adobe Flash Player CVE-2015-0328 is a NULL pointer dereference vulnerability in Flash Player prior to 13.0.0.269 and 14.x up to 16.x before 16.0.0.305 on Windows/macOS, and prior to 11.2.202.442 on Linux, triggered via unknown vectors (per Adobe APSB15-04). The issue could allow a denial of servi...

CVE-2015-0340

CVE-2015-0340 affects Adobe Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134 on Windows/macOS, and before 11.2.202.451 on Linux. The vulnerability allows a remote attacker to bypass file-upload restrictions via unspecified vectors (cross-domain/policy bypass context inferred f...

CVE-2015-0342

CVE-2015-0342 is a use-after-free vulnerability in Adobe Flash Player that can allow remote code execution. Affected products/versions include Flash Player on Windows and OS X prior to 13.0.0.277 and 14.x through 17.x prior to 17.0.0.134, and Linux prior to 11.2.202.451; vectors are unspecified. ...

CVE-2015-5566

CVE-2015-5566 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR (before 18.0.0.199; AIR SDK before 18.0.0.199; AIR SDK & Compiler before 18.0.0.199) that allows attackers to execute arbitrary code via unspecified...

CVE-2015-5569

CVE-2015-5569 affects Adobe Flash Player (and related AIR components) via an improper implementation of the Flash broker API, with unspecified impact in the initial description. Public details in connected sources indicate multiple vulnerabilities (APSB15-25) and patches across platforms: Flash P...

CVE-2015-7639

The CVE-2015-7639 entry describes a use-after-free in Adobe Flash Player (before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and Adobe AIR (before 19.0.0.213, including AIR SDK and SDK & Compiler before 19.0.0.213). This vulnerability allows attackers to e...