CVE-2014-0535

CVE-2014-0535 is an Adobe Flash Player and Adobe AIR security bypass vulnerability. It arises from an error in handling specially crafted SWF files, allowing attackers to bypass intended access restrictions. Affected products include Flash Player on Windows/OS X (before 13.0.0.223 and before 14.0...

CVE-2014-0548

Summary (CVE-2014-0548) : Adobe Flash Player (and related AIR SDK packages) contains a vulnerability that could allow a remote bypass of the Same Origin Policy. The Mageia advisory MGASA-2014-0382 notes that Flash Player 11.2.202.406 fixes multiple security issues, including a bypass of the same-...

CVE-2014-0555

Technical details about CVE-2014-0555 are not provided in the supplied documents. Monitor for updates from official advisories; no affected products, vectors, or fixes are specified here.

CVE-2015-0302

CVE-2015-0302 affects Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux, as well as Adobe AIR before 16.0.0.245 on Windows/OS X and before 16.0.0.272 on Android, plus AIR SDK before 16.0.0.272 and AIR SDK & Compiler befo...

CVE-2015-0328

Adobe Flash Player CVE-2015-0328 is a NULL pointer dereference vulnerability in Flash Player prior to 13.0.0.269 and 14.x up to 16.x before 16.0.0.305 on Windows/macOS, and prior to 11.2.202.442 on Linux, triggered via unknown vectors (per Adobe APSB15-04). The issue could allow a denial of servi...

CVE-2015-3125

CVE-2015-3125 concerns Adobe Flash Player and Adobe AIR components affected by a Same Origin Policy bypass vulnerability described as affecting Flash Player versions before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 for Windows/macOS, and before 11.2.202.481 on Linux, plus Adobe AIR before ...

CVE-2015-5129

CVE-2015-5129 is a heap-based buffer overflow vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), and in Adobe AIR before 18.0.0.199 (including AIR SDK and SDK & Compiler). The issue enables attackers to execute arbitrary code via unspecified...

CVE-2015-7635

The CVE-2015-7635 entry describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: before 18.0.0.252 and 19.x before 19.0.0.207; Linux before 11.2.202.535) and Adobe AIR (before 19.0.0.213, including AIR SDK before/Compiler before 19.0.0.213). The underlying issue is a use-aft...

CVE-2015-7639

The CVE-2015-7639 entry describes a use-after-free in Adobe Flash Player (before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and Adobe AIR (before 19.0.0.213, including AIR SDK and SDK & Compiler before 19.0.0.213). This vulnerability allows attackers to e...

CVE-2016-0966

Technical details for CVE-2016-0966 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates from connected EUVD entries and official advisories.

CVE-2016-1020

Adobe Flash Player vulnerable versions: Windows/OS X — prior to 18.0.0.343 and prior to 21.x before 21.0.0.213; Linux — before 11.2.202.616. Root cause is described as memory corruption enabling arbitrary code execution or DoS via unspecified vectors; exact exploit details are not provided in the...

CVE-2016-1025

Technical details for CVE-2016-1025 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-1031

CVE-2016-1031 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products include Flash Player on Windows/OS X (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The vulnerability arises from a u...

CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2016-4189

Technical details for CVE-2016-4189 are not publicly provided in the supplied documents; no affected products, versions, or remediation information are present. Monitor for updates.

CVE-2016-4217

Technical details about CVE-2016-4217 are not provided in the connected documents; the materials do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2016-4221

Technical details about CVE-2016-4221 are not provided in the connected documents; no product/version/impact specifics are available here. Monitor for updates.

CVE-2016-4232

CVE-2016-4232 is a memory leak in Adobe Flash Player affecting Windows/macOS (Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209) and Linux (before 11.2.202.632). The issue allows attackers to obtain sensitive information from process memory via unspecified vectors; exploitation was o...

CVE-2018-4933

CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...

CVE-2006-3588

CVE-2006-3588 is part of multiple Macromedia/Adobe Flash Player vulnerabilities (along with CVE-2006-3311, CVE-2006-3587, CVE-2006-4640) that could allow remote code execution via specially crafted SWF content. Technical details across connected feeds identify Flash Player in widely used releases...

CVE-2006-4640

CVE-2006-4640 affects Adobe Flash Player prior to 9.0.16.0. Unspecified vulnerability could allow user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. Connected docs corroborate that this is a Flash Player issue tied to allowScriptAccess bypass; no pu...

CVE-2007-2022

CVE-2007-2022 describes a vulnerability in Adobe Flash Player used with Linux browsers (Opera < 9.20 or Konqueror

CVE-2009-0522

CVE-2009-0522 affects Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows, where an attacker could trick a user into visiting an arbitrary URL via manipulation of the mouse pointer display (a clickjacking-like issue). Multiple connected sources corroborate the Windows-sp...

CVE-2012-2040

CVE-2012-2040 describes a local privilege escalation in the Adobe Flash Player installer caused by an untrusted search path that could allow a Trojan horse executable in an unspecified directory to run with elevated privileges. The affected products span multiple platforms: Flash Player before 10...

CVE-2012-5265

CVE-2012-5265 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player on Windows/Mac before 10.3.183.29 and before 11.4.402.287 for 11.x, Linux before 11.2.202.243, Android 2.x/3.x befor...

CVE-2012-5276

CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2014-0588

CVE-2014-0588 is a use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and before 15.0.0.356 on Windows/OS X, and before 11.2.202.418 on Linux, plus Adobe AIR before 15.0.0.356 (and AIR SDK variants). The issue allows arbitrary code execution via unspecified vectors and ...

CVE-2015-0308

CVE-2015-0308 is a use-after-free in Adobe Flash Player that enables remote code execution via unspecified vectors. Affected versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and before 11.2.202.429 on Linux; Adobe AIR before 16.0.0.272 on Wind...

CVE-2015-0323

CVE-2015-0323 is a heap-based buffer overflow in Adobe Flash Player that allows arbitrary code execution. Affected: Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows/macOS; before 11.2.202.442 on Linux. Root cause: heap buffer overflow; vector unspecified. Remediat...

CVE-2015-0338

Adobe Flash Player is affected by an integer overflow (CVE-2015-0338) that could lead to remote code execution. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/macOS , and before 11.2.202.451 on Linux . The root cause is an integer overf...

CVE-2015-3133

Adobe Flash Player and Adobe AIR are affected by CVE-2015-3133. The vulnerability allows remote code execution or memory corruption via unspecified vectors in: Flash Player before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X; Flash Player before 11.2.202.481 on Linux; Adobe AI...

CVE-2015-4431

CVE-2015-4431 is described in connected advisories as Adobe Flash Player null pointer dereference (APSB15-19) triggered by processing a malformed SWF, enabling remote code execution via a crafted file. The advisory confirms remote exploitation potential; no specific affected versions are provided...

CVE-2015-5131

CVE-2015-5131 describes a buffer overflow in Adobe Flash Player that allows arbitrary code execution on Windows, OS X, and Linux, and affects Adobe AIR (and AIR SDK/Compiler). The vulnerability arises from improper handling during parsing of SWF data, with the root cause identified as a buffer ov...

CVE-2015-5549

Technical details about CVE-2015-5549 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5555

CVE-2015-5555 concerns Adobe Flash Player/type confusion. Affected products include Windows and OS X versions prior to 18.0.0.232 and Linux prior to 11.2.202.508, as well as Adobe AIR before 18.0.0.199 and AIR SDK before 18.0.0.199 (and SDK & Compiler before 18.0.0.199). The vulnerability arises ...

CVE-2015-5587

CVE-2015-5587 is a stack-based buffer overflow in Adobe Flash Player (Windows/macOS: before 18.0.0.241; 19.x before 19.0.0.185; Linux: before 11.2.202.521) and Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190) that allows arbitrary code execution via unspecified vectors. Connec...

CVE-2015-8406

Technical details for CVE-2015-8406 are not publicly available in the provided documents; monitor for updates from the listed sources.

CVE-2015-8820

CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2011-0561

Technical details for CVE-2011-0561 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE feeds.

CVE-2012-5250

Technical details for CVE-2012-5250 are not provided in the supplied documents. Public references list the CVE among Flash Player vulnerabilities, but no specifics (affected products, versions, impact or fixes) are included here. Monitor for updates.

CVE-2012-5259

CVE-2012-5259 is a buffer overflow in Adobe Flash Player and related AIR components that allows arbitrary code execution via unspecified vectors. Affected software includes Flash Player on Windows/Mac OS X (before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before ...

CVE-2013-1371

Adobe Flash Player and related AIR components were vulnerable to arbitrary code execution or memory corruption via unspecified vectors (CVE-2013-1371). Affected versions included Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/macOS, before 10.3.183.68 and 11.x before 11.2...

CVE-2013-3325

Technical details for CVE-2013-3325 are not publicly available in the provided documents. The connected EUVD entries mention malware in sbrugna but do not specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2013-3332

Technical details are not publicly available in the provided documents. Monitor for updates from the sources; no specific affected products, versions, or fixes are disclosed here.

CVE-2014-0536

CVE-2014-0536 affects Adobe Flash Player (Windows/macOS: before 13.0.0.223, and 14.x before 14.0.0.125; Linux: before 11.2.202.378) and Adobe AIR/ AIR SDK before 14.0.0.110, with memory corruption enabling arbitrary code execution or DoS via unspecified vectors. Affected components include Flash ...

CVE-2014-0589

CVE-2014-0589 is a heap-based buffer overflow in Adobe Flash Player that enables arbitrary code execution. Affected: Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/OS X, and before 11.2.202.418 on Linux; Adobe AIR before 15.0.0.356 (AIR SDK and Compiler before 15.0.0.356) wi...