CVE-2015-0308

CVE-2015-0308 is a use-after-free in Adobe Flash Player that enables remote code execution via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Wind...

CVE-2015-0340

CVE-2015-0340 affects Adobe Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134 on Windows/macOS, and before 11.2.202.451 on Linux. The vulnerability allows a remote attacker to bypass file-upload restrictions via unspecified vectors (cross-domain/policy bypass context inferred f...

CVE-2015-3081

CVE-2015-3081 is a race condition vulnerability in Adobe Flash Player that bypasses Internet Explorer Protected Mode. Affected versions include Windows/OS X Flash Player before 17.0.0.188 (and 14.x through 17.x before 17.0.0.188) and Linux before 11.2.202.460, plus related Adobe AIR components. R...

CVE-2015-3130

Technical details for CVE-2015-3130 are not provided in the connected documents; please consult official advisories for affected products, impact, and fixes.

CVE-2015-4431

CVE-2015-4431 is described in connected advisories as Adobe Flash Player null pointer dereference (APSB15-19) triggered by processing a malformed SWF, enabling remote code execution via a crafted file. The advisory confirms remote exploitation potential; no specific affected versions are provided...

CVE-2015-5559

CVE-2015-5559 is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: prior to 18.0.0.232; Linux: prior to 11.2.202.508) and in Adobe AIR/Adobe AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. Root cause is a use-after-free in handling of SWF c...

CVE-2015-8050

Technical details about CVE-2015-8050 are not provided in the connected documents. Monitor for updates.

CVE-2015-8438

CVE-2015-8438 and CVE-2015-8446 describe heap-based buffer overflows in Adobe Flash Player (and related AIR components) with different vectors. CVE-2015-8438 affects Flash Player on Windows/macOS/Linux prior to specific builds (18.0.0.268, 19.x, 20.x before 20.0.0.228; Linux prior to 11.2.202.554...

CVE-2015-8658

Technical details for CVE-2015-8658 are not provided in the supplied documents; public specifics (affected software, impact, fixes) are not available here. Monitor for updates.

CVE-2016-0971

CVE-2016-0971 refers to a heap-based buffer overflow in Adobe Flash Player and related components that could allow arbitrary code execution. Affected versions include Flash Player on Windows/macOS prior to 18.0.0.329 and 19.x and before 20.0.0.306 on Windows/macOS, and Flash Player for Linux prio...

CVE-2016-1033

Technical details about CVE-2016-1033 are not publicly available in the provided connected documents. Monitor for updates; currently no affected products, versions, vectors, or fixes are disclosed in the supplied sources.

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2016-4155

CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...

CVE-2016-4161

Technical details for CVE-2016-4161 are not publicly disclosed in the provided documents. No affected products, versions, vulnerabilities, or fixes are described here. Monitor for updates from the connected sources.

CVE-2016-4183

CVE-2016-4183 affects Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux. It enables arbitrary code execution or a memory-corruption-based denial of service via unspecified vectors, and is distinct from CVE-2016-4172, -4...

CVE-2016-4189

Technical details for CVE-2016-4189 are not publicly provided in the supplied documents; no affected products, versions, or remediation information are present. Monitor for updates.

CVE-2016-4217

Technical details about CVE-2016-4217 are not provided in the connected documents; the materials do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2016-4233

Technical details about CVE-2016-4233 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories."

CVE-2016-7878

CVE-2016-7878 affects Adobe Flash Player (PC/Linux) with use-after-free in the PSDK MediaPlayer class, enabling arbitrary code execution. Affected versions: Flash Player 23.0.0.207 and earlier (Windows/other builds indicated in CVE list). Public advisories confirm the flaw and note escalation to ...

CVE-2017-3063

CVE-2017-3063 affects Adobe Flash Player, specifically 25.0.0.127 and earlier, where a use-after-free vulnerability in the ActionScript2 NetStream class could allow arbitrary code execution on successful exploitation. Multiple connected advisories confirm this family of flaws and note that upgrad...

CVE-2012-4164

Adobe Flash Player (and AIR) vulnerability CVE-2012-4164 allows arbitrary code execution or memory corruption via unspecified vectors across Windows, Mac OS X, Linux, and Android; affected versions listed in the initial description (pre-10.3.183.23, pre-11.4.402.265 on Windows/Mac; pre-11.2.202.2...

CVE-2012-5261

CVE-2012-5261 affects Adobe Flash Player and Adobe AIR. Affected: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/macOS; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x. Also af...

CVE-2012-5276

CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2014-0518

Adobe Flash Player vulnerability CVE-2014-0518 (and related CVEs) allows bypass of intended access restrictions via unspecified vectors. Affected products/versions noted in the initial entry: Flash Player for Windows and macOS prior to 13.0.0.214, Flash Player for Linux prior to 11.2.202.359, Ado...

CVE-2014-0541

CVE-2014-0541 is listed among Adobe Flash Player vulnerabilities in the OpenVAS-derived GLSA entry (GLSA 201408-05), indicating a bypass of intended access restrictions. The connected sources do not provide detailed technical specifics (affected product/version pairs beyond the general Flash Play...

CVE-2014-0555

Technical details about CVE-2014-0555 are not provided in the supplied documents. Monitor for updates from official advisories; no affected products, vectors, or fixes are specified here.

CVE-2015-5566

CVE-2015-5566 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR (before 18.0.0.199; AIR SDK before 18.0.0.199; AIR SDK & Compiler before 18.0.0.199) that allows attackers to execute arbitrary code via unspecified...

CVE-2015-5568

CVE-2015-5568 affects Adobe Flash Player and related AIR components. Public docs confirm this vulnerability is part of the APSB15-23 set and is tied to a vector-length corruption that could enable a denial of service or other impact. Affected software and versions per the sources include: Windows...

CVE-2015-7639

The CVE-2015-7639 entry describes a use-after-free in Adobe Flash Player (before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and Adobe AIR (before 19.0.0.213, including AIR SDK and SDK & Compiler before 19.0.0.213). This vulnerability allows attackers to e...

CVE-2015-7644

Technical details for CVE-2015-7644 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2015-8063

CVE-2015-8063 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. Affected software includes Flash Player before 18.0.0.268 and 19.x, and before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204 and AIR SDK before/SDK & C...

CVE-2015-8439

CVE-2015-8439 is a type-confusion remote-code-execution flaw in Adobe Flash Player (and AIR components) via getRemote calls. Affected: Flash Player before 18.0.0.268 and 19.x/20.x before 20.0.0.228 on Windows/macOS; Linux before 11.2.202.554; Adobe AIR before 20.0.0.204 and related SDKs. Cause: t...

CVE-2015-8453

Technical details for CVE-2015-8453 are not publicly provided in the supplied documents; no concrete affected products, versions, or impact are stated here. Monitor for updates.

CVE-2015-8822

CVE-2015-8822 is a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via crafted MPEG-4 data. Affected: Flash Player prior to 18.0.0.268, 19.x prior to 20.0.0.228 (Windows/macOS); Linux prior to 11.2.202.554; Adobe AIR prior to 20.0.0.204; AIR S...

CVE-2016-1026

Technical details (affected products, exploited vector, impact, fixes) for CVE-2016-1026 are not provided in the supplied documents; monitor for updates from official sources.

CVE-2016-1029

Technical details for CVE-2016-1029 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates in the connected EUVD entries and the NVD entry for new details.

CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2016-4163

Technical details about CVE-2016-4163 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the EUVD entries reference malware but do not clarify product/version specifics or vulnerability mechanics.

CVE-2016-4240

Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.

CVE-2016-4247

Adobe Flash Player contains a race condition vulnerability (CVE-2016-4247) that could lead to information disclosure. Affected versions include Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux. Multiple connected advisories/patches (e...

CVE-2018-12826

Adobe Flash Player prior to 30.0.0.154 is affected by CVE-2018-12826, an out-of-bounds read vulnerability that could lead to information disclosure. Affected products include Flash Player components up to version 30.0.0.134 (and related plugin cases noted in APSB18-25). Red Hat’s RHSA-2018:2435 c...

CVE-2018-4936

Adobe Flash Player version 29.0.0.113 and earlier contains a heap overflow vulnerability (CVE-2018-4936) that could lead to information disclosure. Evidence from multiple advisories and scanners links this CVE to APSB18-08 and a patch progression up to 29.0.0.140. Practically, exploitation could ...

CVE-2006-4640

CVE-2006-4640 affects Adobe Flash Player prior to 9.0.16.0. Unspecified vulnerability could allow user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. Connected docs corroborate that this is a Flash Player issue tied to allowScriptAccess bypass; no pu...

CVE-2007-2022

CVE-2007-2022 describes a vulnerability in Adobe Flash Player used with Linux browsers (Opera < 9.20 or Konqueror

CVE-2007-6242

CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...

CVE-2008-1654

CVE-2008-1654 describes an interaction error between Adobe Flash and UPnP services enabling CSRF-style attacks via Flash’s navigateToURL sending a SOAP to a UPnP control point (e.g., changing the DNS server). The vulnerability affects Adobe Flash Player/Flash plugin across multiple platforms as p...

CVE-2011-0579

Adobe Flash Player (desktop: Windows/Mac/Linux/Solaris; Android prior to 10.3.181.14 desktop and 10.3.185.21 on Android) is affected by CVE-2011-0579, described as information disclosure via unspecified vectors. The connected documents reference multiple Flash vulnerabilities from 2011-05 to 2011...