CVE-2016-1015

CVE-2016-1015 is an Adobe Flash Player type confusion vulnerability. The affected products are Flash Player on Windows and macOS (versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213) and Linux (before 11.2.202.616). The root cause is a type confusion error triggered by overriding Net...

CVE-2016-0982

CVE-2016-0982 corresponds to a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: affected versions include before 18.0.0.329 and 19.x before 20.0.0.306; Linux: before 11.2.202.569) and in Adobe AIR (before 20.0.0.260; AIR SDK before 20.0.0.260; AIR SDK & Compiler before 20.0.0.26...

CVE-2015-3041

Technical details for CVE-2015-3041 are not provided in the connected documents. Public info is limited to a generic description in the Initial document. Monitor for updates.

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

CVE-2016-0973

Technical details about CVE-2016-0973 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-0355

Adobe Flash Player memory‑corruption vulnerability (CVE‑2015‑0355) affects Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/macOS, and before 11.2.202.457 on Linux. Root cause is memory corruption via unspecified vectors, leading to arbitrary code execution or denia...

CVE-2019-8070

CVE-2019-8070 is a use-after-free vulnerability in Adobe Flash Player for Windows, macOS, Linux and Chrome OS, affecting version(s) up to and including 32.0.0.238 (and earlier). The root cause is a memory mismanagement issue (use-after-free) that could allow an attacker to achieve arbitrary code ...

CVE-2016-0993

CVE-2016-0993 describes an integer overflow in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR before 21.0.0.176, including AIR SDKs, that allows attackers to execute arbitrary code via unspecified vectors. Thi...

CVE-2015-0322

CVE-2015-0322 is a Use-After-Free vulnerability in Adobe Flash Player that allows remote code execution via a specially crafted SWF file. Affected versions on Windows and OS X: before 13.0.0.269 and 14.x through 16.x before 16.0.0.305; Linux: before 11.2.202.442. Root cause is a use-after-free co...

CVE-2020-9746

Adobe Flash Player

CVE-2016-0975

CVE-2016-0975 is a use-after-free vulnerability in the Flash/Adobe AIR stack arising from improper reference handling in the instanceof function. Affected products/usages: Adobe Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows and OS X, and before 11.2.202.569 on Linux; Ad...

CVE-2013-0634

CVE-2013-0634 affects Adobe Flash Player’s handling of RegExp in the PCRE engine, causing a heap-based memory corruption that enables remote code execution or memory corruption. Vulnerable versions include Windows and macOS builds prior to 10.3.183.51 and 11.x prior to 11.5.502.149, Linux prior t...

CVE-2012-0773

The CVE-2012-0773 issue concerns the NetStream class in Adobe Flash Player and AIR. Affected components include Flash Player before 10.3.183.18 and 11.x before 11.2.202.223/228 on Windows, macOS, Linux; Solaris Flash Player before 10.3.183.18/11.x before 11.2.202.223; Android 2.x/3.x before 11.1....

CVE-2020-9633

The CVE-2020-9633 issue affects Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, including Flash Player builds for Google Chrome (32.0.0.371) and for Microsoft Edge/IE (32.0.0.330 and earlier). It is a use-after-free vulnerability that could lead to arbitrary code execution on successfu...

CVE-2012-2036

Adobe Flash Player and Adobe AIR are affected by multiple CVEs (CVE-2012-2034 to CVE-2012-2040) including an integer overflow and related memory corruption that could allow arbitrary code execution. The CVEs apply to various platforms: Windows, macOS, Linux, and Android, with Adobe AIR тоже affec...

CVE-2013-5331

Adobe Flash Player vulnerability CVE-2013-5331 is a type-confusion remote code execution issue affecting Flash Player on Windows, macOS and Linux prior to patched versions (e.g., 11.2.202.332 for many distributions; 11.9.900.170 in some branches). Exploitation was observed in the wild around Nove...

CVE-2013-5330

CVE-2013-5330 is a memory corruption vulnerability in Adobe Flash Player and related Adobe AIR components, arising from an error in parsing specially crafted SWF files. Affected versions include Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows/macOS, and Linux...

CVE-2012-2038

CVE-2012-2038 affects Adobe Flash Player across Windows, macOS, Linux, Android, and Adobe AIR before 3.3.0.3610. The issue allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Connected sources note that the Flash Player update to 11.2....

CVE-2012-0779

CVE-2012-0779 documents a remote code execution risk in Adobe Flash Player caused by an object confusion vulnerability. The issue affected Flash Player on Windows, macOS, Linux, and Android (various versions listed in the initial entry), with attackers able to run arbitrary code via crafted SWF/R...

CVE-2013-2555

CVE-2013-2555 : Integer overflow in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR prior to specific builds allows remote code execution via unspecified vectors; affected versions include Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows/Mac, before 10.3.183.75 and...

CVE-2013-0648

Adobe Flash Player contains a code execution vulnerability in the ExternalInterface ActionScript pathway. Affected versions include Windows/Mac builds prior to 10.3.183.67 and 11.x prior to 11.6.602.171, and Linux builds prior to 10.3.183.67 and 11.x prior to 11.2.202.273. Exploitation could occu...

CVE-2012-0752

Adobe Flash Player is vulnerable to a type confusion leading to arbitrary code execution or memory corruption. Affected versions include Windows, macOS, Linux, and Solaris builds prior to 10.3.183.15 and 11.x before 11.1.102.62 (Android 2.x/3.x before 11.1.102.62; Android 4.x before 11.1.115.6). ...

CVE-2012-2035

The CVE-2012-2035 entry concerns a stack-based buffer overflow in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR that enables arbitrary code execution via unspecified vectors. Connected advisories (OpenVAS/Nessus entries and vendor bulletins) corroborate that multiple Flash Player vulnera...

CVE-2012-5278

CVE-2012-5278 is one of multiple vulnerabilities affecting Adobe Flash Player and Adobe AIR; the issue allows bypassing intended access restrictions and arbitrary code execution. Public details in connected advisories identify Flash Player variants affected (Windows, Mac, Linux, Android) and indi...

CVE-2013-5324

CVE-2013-5324 relates to memory corruption in Adobe Flash Player and Adobe AIR. Affected components include Flash Player on Windows, macOS, Linux, Android (various versions) and Adobe AIR/SDK. The vulnerability could allow attackers to execute arbitrary code or cause a denial of service via memor...

CVE-2012-5270

CVE-2012-5270 refers to a memory‑corruption based arbitrary‑code execution/DoS vulnerability in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR, described as exploitable via unspecified vectors. Affected products include Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 (Windo...

CVE-2012-4163

CVE-2012-4163 is a memory-corruption/remote-code-execution vulnerability in Adobe Flash Player (and related Adobe AIR ) that could be exploited via unspecified vectors. Affected versions include Flash Player on Windows/Mac OS X prior to 10.3.183.23 and 11.x prior to 11.4.402.265, Linux prior to 1...

CVE-2012-4167

Adobe Flash Player and Flash plugin are affected by CVE-2012-4167 due to an integer overflow, enabling arbitrary code execution via unspecified vectors. This impacts multiple platforms and product lines (Windows, macOS, Linux, Android) prior to the specified fixed versions in the advisories. Red ...

CVE-2012-5266

CVE-2012-5266 is a buffer overflow in Adobe Flash Player (and Adobe AIR) that could allow arbitrary code execution. Affected: Flash Player on Windows/Mac before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before 11.2.202.243; Android 2.x/3.x before 11.1.111.19 and ...

CVE-2012-5677

CVE-2012-5677 affects Adobe Flash Player and Adobe AIR components. The initial description specifies an integer overflow in Flash Player before 10.3.183.48 and 11.x before 11.5.502.135/136 (various OSs), and Adobe AIR before 3.5.0.880/890, enabling arbitrary code execution via unspecified vectors...

CVE-2012-0768

The CVE-2012-0768 issue affects the Matrix3D component of Adobe Flash Player prior to 10.3.183.16 and 11.x before 11.1.102.63 (Windows, macOS, Linux, Solaris; Android on earlier builds). It allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors (memory cor...

CVE-2012-2039

CVE-2012-2039 affects Adobe Flash Player prior to 10.3.183.20 and 11.x prior to 11.3.300.257 on Windows/Mac; prior to 10.3.183.20 and 11.x prior to 11.2.202.236 on Linux; prior to 11.1.111.10 on Android 2.x/3.x; prior to 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610. The vulnerabilit...

CVE-2012-4165

CVE-2012-4165 concerns Adobe Flash Player and Flash runtime components (including AIR) with memory-corruption based remote code execution via unspecified vectors. Affected versions include Flash Player prior to 10.3.183.23 and software in the 11.x line before 11.4.402.265 on Windows/macOS; on Lin...

CVE-2013-3361

CVE-2013-3361 affects Adobe Flash Player and Adobe AIR with memory corruption vulnerabilities that could allow attackers to execute arbitrary code or cause a denial of service. Affected versions span multiple platforms: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/ma...

CVE-2012-5267

Adobe Flash Player (and AIR) is affected by CVE-2012-5267 as part of a broader set of memory corruption vulnerabilities disclosed in 2012. Public sources (including OpenVAS/Gentoo/SUSE advisories) reference Flash memory-corruption issues exploitable via unspecified vectors and note that updates t...

CVE-2012-5678

CVE-2012-5678 concerns Adobe Flash Player (and related AIR components) with multiple memory-corruption and code-execution vulnerabilities across Windows, Mac, Linux and Android platforms. Affected versions include Flash Player before 10.3.183.48 / 11.x before 11.5.502.135 on Windows, Mac, Linux; ...

CVE-2013-3362

CVE-2013-3362 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected Flash Player versions (before 11.7.700.242, 11.8.x before 11.8.800.168 on Windows/mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, before 11.1.115.81 on Android 4.x) and AIR before ...

CVE-2020-3757

Adobe Flash Player contains a type confusion vulnerability (CVE-2020-3757) that could allow arbitrary code execution. Affected products include Flash Player before version 32.0.0.330 (various builds such as 32.0.0.321/314/255 and earlier). Root cause is type confusion; exploitation is described a...

CVE-2012-5271

CVE-2012-5271 affects Adobe Flash Player and Adobe AIR. The Flash Player versions (Windows/macOS: before 10.3.183.29 and before 11.4.402.287 on 11.x; Linux: before 10.3.183.29 and before 11.2.202.243; Android 2.x/3.x: before 11.1.111.19; Android 4.x: before 11.1.115.20) and Adobe AIR before 3.4.0...

CVE-2012-5269

CVE-2012-5269 concerns Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR with memory-corruption based remote code execution vector. Connected sources confirm affected versions prior to 10.3.183.29/11.x updates for Flash and pre-3.4.0.2710 AIR, with multiple CVEs (incl. CVE-2012-5248 to CVE-201...

CVE-2012-5676

CVE-2012-5676 concerns a buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution. The vulnerability affects multiple platforms: Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 (Windows), before 10.3.183.48 and 11.x before 11.5.502.136 (Mac OS X), bef...

CVE-2011-2140

CVE-2011-2140 affects Adobe Flash Player before 10.3.183.5 (Windows/macOS/Linux/Solaris) and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 (Windows/macOS; earlier Android support). The vulnerability is a memory-corruption/arbitrary code execution via aMalformed MP4 processing path in t...

CVE-2013-0638

Adobe Flash Player and Adobe AIR are listed as vulnerable across multiple platforms (Windows, Mac OS X, Linux, Android) with CVE-2013-0638, due to memory corruption allowing arbitrary code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 10.3.1...

CVE-2013-3363

CVE-2013-3363 affects Adobe Flash Player and Adobe AIR prior to specific fixed versions. The description lists vulnerable software: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/Mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, and before 11.1....

CVE-2012-0769

Adobe Flash Player contains CVE-2012-0769 (and related CVE-2012-0768) where integer handling flaws could lead to information disclosure across Windows, macOS, Linux, Solaris, and Android runtimes. The public-facing details show that Flash Player 11.1.102.63 (and earlier 11.x, 10.3.x lines) fix th...

CVE-2013-3347

CVE-2013-3347: Integer overflow in Adobe Flash Player during PCM resampling allows arbitrary code execution. Affected are Windows/Mac builds prior to 11.7.700.232 and 11.8.x prior to 11.8.800.94; Linux prior to 11.2.202.297; Android 2.x/3.x prior to 11.1.111.64; Android 4.x prior to 11.1.115.69. ...

CVE-2012-0753

CVE-2012-0753 affects Adobe Flash Player prior to 10.3.183.15 and prior to 11.x before 11.1.102.62 (Windows/macOS/Linux/Solaris); prior to 11.1.111.6 on Android 2.x/3.x; prior to 11.1.115.6 on Android 4.x. The vulnerability allows arbitrary code execution or a denial of service (memory corruption...

CVE-2012-5268

CVE-2012-5268 is a high-severity vulnerability affecting Adobe Flash Player (Windows/Mac/Linux/Android) and Adobe AIR, described as memory corruption that could allow arbitrary code execution or to cause a denial of service via unspecified vectors. The connected documents confirm this CVE as part...

CVE-2013-3345

Adobe Flash Player is affected by CVE-2013-3345 across Windows, macOS, Linux, and Android builds prior to the fixed versions referenced in APSB13-17. The underlying issue is memory corruption leading to arbitrary code execution or denial of service via unspecified vectors. Patches are available (...

CVE-2012-5272

CVE-2012-5272 affects Adobe Flash Player and AIR across multiple platforms. The issue is a memory corruption vulnerability in Flash Player (Windows/macOS/Linux/Android) that could allow arbitrary code execution or a denial of service via unspecified vectors. Affected Flash versions are: Windows/M...