CVE-2015-3042

CVE-2015-3042 affects Adobe Flash Player prior to 13.0.0.281 and 14.x through 17.x prior to 17.0.0.169 on Windows and OS X, and prior to 11.2.202.457 on Linux. The vulnerability is a memory corruption issue that allows attackers to execute arbitrary code or cause a denial of service via unspecifi...

CVE-2015-3038

CVE-2015-3038 affects Adobe Flash Player on Windows, OS X, and Linux; vulnerable versions include Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Linux before 11.2.202.457), with memory corruption that can enable arbitrary code execution or a denial of service via unspecif...

CVE-2015-0355

Adobe Flash Player memory‑corruption vulnerability (CVE‑2015‑0355) affects Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/macOS, and before 11.2.202.457 on Linux. Root cause is memory corruption via unspecified vectors, leading to arbitrary code execution or denia...

CVE-2016-0993

CVE-2016-0993 describes an integer overflow in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/macOS; before 11.2.202.577 on Linux) and in Adobe AIR before 21.0.0.176, including AIR SDKs, that allows attackers to execute arbitrary code via unspecified vectors. Thi...

CVE-2020-9746

Adobe Flash Player

CVE-2016-0982

CVE-2016-0982 corresponds to a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: affected versions include before 18.0.0.329 and 19.x before 20.0.0.306; Linux: before 11.2.202.569) and in Adobe AIR (before 20.0.0.260; AIR SDK before 20.0.0.260; AIR SDK & Compiler before 20.0.0.26...

CVE-2016-0973

Technical details about CVE-2016-0973 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2019-8070

CVE-2019-8070 is a use-after-free vulnerability in Adobe Flash Player for Windows, macOS, Linux and Chrome OS, affecting version(s) up to and including 32.0.0.238 (and earlier). The root cause is a memory mismanagement issue (use-after-free) that could allow an attacker to achieve arbitrary code ...

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

CVE-2013-0648

Adobe Flash Player contains a code execution vulnerability in the ExternalInterface ActionScript pathway. Affected versions include Windows/Mac builds prior to 10.3.183.67 and 11.x prior to 11.6.602.171, and Linux builds prior to 10.3.183.67 and 11.x prior to 11.2.202.273. Exploitation could occu...

CVE-2015-0322

CVE-2015-0322 is a Use-After-Free vulnerability in Adobe Flash Player that allows remote code execution via a specially crafted SWF file. Affected versions on Windows and OS X: before 13.0.0.269 and 14.x through 16.x before 16.0.0.305; Linux: before 11.2.202.442. Root cause is a use-after-free co...

CVE-2016-0975

CVE-2016-0975 is a use-after-free vulnerability in the Flash/Adobe AIR stack arising from improper reference handling in the instanceof function. Affected products/usages: Adobe Flash Player before 18.0.0.329 and 19.x and before 20.0.0.306 on Windows and OS X, and before 11.2.202.569 on Linux; Ad...

CVE-2013-0634

A remote code execution (RCE) and denial of service (DoS) vulnerability exists in Adobe Flash Player (Windows, Mac OS X, Linux, and Android) due to a memory corruption issue in the PCRE engine 's buffer allocation. Specifically, a heap-based buffer overflow can be triggered by processing a crafte...

CVE-2020-9633

The CVE-2020-9633 issue affects Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, including Flash Player builds for Google Chrome (32.0.0.371) and for Microsoft Edge/IE (32.0.0.330 and earlier). It is a use-after-free vulnerability that could lead to arbitrary code execution on successfu...

CVE-2012-0773

The NetStream class in Adobe Flash Player and AIR contains a memory corruption vulnerability. Affected versions include Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 (Windows, Mac OS X, Linux), before 11.2.202.223 on Solaris, and before 11.1.111.8 on Android 2.x and 3.x; and AIR be...

CVE-2012-2036

Adobe Flash Player and Adobe AIR are affected by multiple CVEs (CVE-2012-2034 to CVE-2012-2040) including an integer overflow and related memory corruption that could allow arbitrary code execution. The CVEs apply to various platforms: Windows, macOS, Linux, and Android, with Adobe AIR тоже affec...

CVE-2013-5331

Adobe Flash Player and related products (Adobe AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler) are vulnerable to a type confusion vulnerability. Remote attackers can execute arbitrary code by enticing a victim to open a specially crafted .swf file. Affected versions include Flash Player before ...

CVE-2012-0779

Adobe Flash Player versions before 10.3.183.19 (Windows, Mac OS X, Linux), before 11.2.202.235 (Windows, Mac OS X, Linux), before 11.1.111.9 (Android 2.x/3.x), and before 11.1.115.8 (Android 4.x) are vulnerable to a remote code execution flaw. This object confusion vulnerability allows attackers ...

CVE-2012-4167

An integer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code via unspecified vectors. Affected versions include Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 (Windows/Mac OS X), before 10.3.183.23 and 11.x before 11.2.202.238 (Lin...

CVE-2012-2038

CVE-2012-2038 affects Adobe Flash Player across Windows, macOS, Linux, Android, and Adobe AIR before 3.3.0.3610. The issue allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Connected sources note that the Flash Player update to 11.2....

CVE-2013-5330

A memory corruption vulnerability exists in Adobe Flash Player caused by an error while parsing specially crafted SWF files . This flaw allows a remote attacker to entice a victim into opening such a file, potentially leading to arbitrary code execution with the privileges of the process or a den...

CVE-2013-2555

CVE-2013-2555 : Integer overflow in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR prior to specific builds allows remote code execution via unspecified vectors; affected versions include Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows/Mac, before 10.3.183.75 and...

CVE-2010-3654

Adobe Flash Player and Adobe Reader/Acrobat 9.x through 9.4 are vulnerable to remote code execution or denial of service due to a failure to properly parse Flash content inside PDF files. Affected versions include Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64, as well as authpla...

CVE-2012-0768

The CVE-2012-0768 issue affects the Matrix3D component of Adobe Flash Player prior to 10.3.183.16 and 11.x before 11.1.102.63 (Windows, macOS, Linux, Solaris; Android on earlier builds). It allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors (memory cor...

CVE-2012-4165

CVE-2012-4165 concerns Adobe Flash Player and Flash runtime components (including AIR) with memory-corruption based remote code execution via unspecified vectors. Affected versions include Flash Player prior to 10.3.183.23 and software in the 11.x line before 11.4.402.265 on Windows/macOS; on Lin...

CVE-2013-5324

CVE-2013-5324 relates to memory corruption in Adobe Flash Player and Adobe AIR. Affected components include Flash Player on Windows, macOS, Linux, Android (various versions) and Adobe AIR/SDK. The vulnerability could allow attackers to execute arbitrary code or cause a denial of service via memor...

CVE-2012-0752

Adobe Flash Player is vulnerable to a type confusion leading to arbitrary code execution or memory corruption. Affected versions include Windows, macOS, Linux, and Solaris builds prior to 10.3.183.15 and 11.x before 11.1.102.62 (Android 2.x/3.x before 11.1.102.62; Android 4.x before 11.1.115.6). ...

CVE-2012-4163

CVE-2012-4163 is a memory-corruption/remote-code-execution vulnerability in Adobe Flash Player (and related Adobe AIR ) that could be exploited via unspecified vectors. Affected versions include Flash Player on Windows/Mac OS X prior to 10.3.183.23 and 11.x prior to 11.4.402.265, Linux prior to 1...

CVE-2012-5270

CVE-2012-5270 refers to a memory‑corruption based arbitrary‑code execution/DoS vulnerability in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR, described as exploitable via unspecified vectors. Affected products include Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 (Windo...

CVE-2012-5677

CVE-2012-5677 affects Adobe Flash Player and Adobe AIR components. The initial description specifies an integer overflow in Flash Player before 10.3.183.48 and 11.x before 11.5.502.135/136 (various OSs), and Adobe AIR before 3.5.0.880/890, enabling arbitrary code execution via unspecified vectors...

CVE-2012-5266

CVE-2012-5266 is a buffer overflow in Adobe Flash Player (and Adobe AIR) that could allow arbitrary code execution. Affected: Flash Player on Windows/Mac before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before 11.2.202.243; Android 2.x/3.x before 11.1.111.19 and ...

CVE-2012-5278

CVE-2012-5278 is one of multiple vulnerabilities affecting Adobe Flash Player and Adobe AIR; the issue allows bypassing intended access restrictions and arbitrary code execution. Public details in connected advisories identify Flash Player variants affected (Windows, Mac, Linux, Android) and indi...

CVE-2013-3361

CVE-2013-3361 affects Adobe Flash Player and Adobe AIR with memory corruption vulnerabilities that could allow attackers to execute arbitrary code or cause a denial of service. Affected versions span multiple platforms: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/ma...

CVE-2012-2035

The CVE-2012-2035 entry concerns a stack-based buffer overflow in Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR that enables arbitrary code execution via unspecified vectors. Connected advisories (OpenVAS/Nessus entries and vendor bulletins) corroborate that multiple Flash Player vulnera...

CVE-2012-5267

Adobe Flash Player (and AIR) is affected by CVE-2012-5267 as part of a broader set of memory corruption vulnerabilities disclosed in 2012. Public sources (including OpenVAS/Gentoo/SUSE advisories) reference Flash memory-corruption issues exploitable via unspecified vectors and note that updates t...

CVE-2020-3757

Adobe Flash Player contains a type confusion vulnerability (CVE-2020-3757) that could allow arbitrary code execution. Affected products include Flash Player before version 32.0.0.330 (various builds such as 32.0.0.321/314/255 and earlier). Root cause is type confusion; exploitation is described a...

CVE-2011-2140

A memory corruption vulnerability in Adobe Flash Player (versions before 10.3.183.5 on Windows, Mac OS X, and Linux; before 10.3.186.3 on Android) and Adobe AIR (before 2.7.1 on Windows and Mac OS X; before 2.7.1.1961 on Android) allows attackers to execute arbitrary code or cause a denial of ser...

CVE-2012-5678

CVE-2012-5678 concerns Adobe Flash Player (and related AIR components) with multiple memory-corruption and code-execution vulnerabilities across Windows, Mac, Linux and Android platforms. Affected versions include Flash Player before 10.3.183.48 / 11.x before 11.5.502.135 on Windows, Mac, Linux; ...

CVE-2013-3362

CVE-2013-3362 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected Flash Player versions (before 11.7.700.242, 11.8.x before 11.8.800.168 on Windows/mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, before 11.1.115.81 on Android 4.x) and AIR before ...

CVE-2012-0769

Adobe Flash Player contains CVE-2012-0769 (and related CVE-2012-0768) where integer handling flaws could lead to information disclosure across Windows, macOS, Linux, Solaris, and Android runtimes. The public-facing details show that Flash Player 11.1.102.63 (and earlier 11.x, 10.3.x lines) fix th...

CVE-2012-2039

CVE-2012-2039 affects Adobe Flash Player prior to 10.3.183.20 and 11.x prior to 11.3.300.257 on Windows/Mac; prior to 10.3.183.20 and 11.x prior to 11.2.202.236 on Linux; prior to 11.1.111.10 on Android 2.x/3.x; prior to 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610. The vulnerabilit...

CVE-2012-5676

CVE-2012-5676 concerns a buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution. The vulnerability affects multiple platforms: Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 (Windows), before 10.3.183.48 and 11.x before 11.5.502.136 (Mac OS X), bef...

CVE-2012-5269

CVE-2012-5269 concerns Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR with memory-corruption based remote code execution vector. Connected sources confirm affected versions prior to 10.3.183.29/11.x updates for Flash and pre-3.4.0.2710 AIR, with multiple CVEs (incl. CVE-2012-5248 to CVE-201...

CVE-2012-5271

CVE-2012-5271 affects Adobe Flash Player and Adobe AIR. The Flash Player versions (Windows/macOS: before 10.3.183.29 and before 11.4.402.287 on 11.x; Linux: before 10.3.183.29 and before 11.2.202.243; Android 2.x/3.x: before 11.1.111.19; Android 4.x: before 11.1.115.20) and Adobe AIR before 3.4.0...

CVE-2013-3363

CVE-2013-3363 affects Adobe Flash Player and Adobe AIR prior to specific fixed versions. The description lists vulnerable software: Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows/Mac, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x/3.x, and before 11.1....

CVE-2013-0638

Adobe Flash Player and Adobe AIR are listed as vulnerable across multiple platforms (Windows, Mac OS X, Linux, Android) with CVE-2013-0638, due to memory corruption allowing arbitrary code execution or denial of service via unspecified vectors. Affected versions include Flash Player before 10.3.1...

CVE-2013-3347

CVE-2013-3347: Integer overflow in Adobe Flash Player during PCM resampling allows arbitrary code execution. Affected are Windows/Mac builds prior to 11.7.700.232 and 11.8.x prior to 11.8.800.94; Linux prior to 11.2.202.297; Android 2.x/3.x prior to 11.1.111.64; Android 4.x prior to 11.1.115.69. ...

CVE-2013-3345

Adobe Flash Player is affected by CVE-2013-3345 across Windows, macOS, Linux, and Android builds prior to the fixed versions referenced in APSB13-17. The underlying issue is memory corruption leading to arbitrary code execution or denial of service via unspecified vectors. Patches are available (...

CVE-2012-5268

CVE-2012-5268 is a high-severity vulnerability affecting Adobe Flash Player (Windows/Mac/Linux/Android) and Adobe AIR, described as memory corruption that could allow arbitrary code execution or to cause a denial of service via unspecified vectors. The connected documents confirm this CVE as part...

CVE-2013-0643

CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows remote code execution via crafted SWF content. Affected products include Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183....