CVE-2012-5250

Technical details for CVE-2012-5250 are not provided in the supplied documents. Public references list the CVE among Flash Player vulnerabilities, but no specifics (affected products, versions, impact or fixes) are included here. Monitor for updates.

CVE-2012-5257

CVE-2012-5257 is a buffer overflow in Adobe Flash Player (Windows/Mac/Linux/Android) prior to the specified patched versions, and in Adobe AIR prior to 3.4.0.2710. The vulnerability allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.29 ...

CVE-2012-5265

CVE-2012-5265 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player on Windows/Mac before 10.3.183.29 and before 11.4.402.287 for 11.x, Linux before 11.2.202.243, Android 2.x/3.x befor...

CVE-2012-5279

Adobe Flash Player and Adobe AIR are affected by CVE-2012-5279. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.43 and 11.x before 11.5.502.110), Linux (before 10.3.183.43 and 11.x before 11.2.2...

CVE-2014-0535

CVE-2014-0535 is an Adobe Flash Player and Adobe AIR security bypass vulnerability. It arises from an error in handling specially crafted SWF files, allowing attackers to bypass intended access restrictions. Affected products include Flash Player on Windows/OS X (before 13.0.0.223 and before 14.0...

CVE-2014-0540

The CVE-2014-0540 entry concerns memory address discovery bypass of ASLR in Adobe Flash Player prior to 13.0.0.241, 14.x before 14.0.0.176 (Windows/macOS), Linux version 11.2.202.400, and Adobe AIR before 14.0.0.178 (Windows/macOS) and before 14.0.0.179 (Android), plus related AIR SDKs. It is des...

CVE-2014-0548

Summary (CVE-2014-0548) : Adobe Flash Player (and related AIR SDK packages) contains a vulnerability that could allow a remote bypass of the Same Origin Policy. The Mageia advisory MGASA-2014-0382 notes that Flash Player 11.2.202.406 fixes multiple security issues, including a bypass of the same-...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2014-0589

CVE-2014-0589 is a heap-based buffer overflow in Adobe Flash Player that enables arbitrary code execution. Affected: Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/OS X, and before 11.2.202.418 on Linux; Adobe AIR before 15.0.0.356 (AIR SDK and Compiler before 15.0.0.356) wi...

CVE-2015-0304

CVE-2015-0304 is described in connected advisories as a heap-based buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/...

CVE-2015-0306

CVE-2015-0306 is a memory corruption vulnerability in Adobe Flash Player (and related AIR components) addressed in APSB15-01. Connected sources confirm affected products and versions include Flash Player prior to 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/OS X, and Linux before 1...

CVE-2015-0338

Adobe Flash Player is affected by an integer overflow (CVE-2015-0338) that could lead to remote code execution. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/macOS , and before 11.2.202.451 on Linux . The root cause is an integer overf...

CVE-2015-5553

CVE-2015-5553 covers multiple Adobe Flash Player and Adobe AIR components with memory corruption leading to arbitrary code execution or denial of service. Affected software includes Flash Player before 18.0.0.232 on Windows/OSX and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (a...

CVE-2015-5555

CVE-2015-5555 concerns Adobe Flash Player/type confusion. Affected products include Windows and OS X versions prior to 18.0.0.232 and Linux prior to 11.2.202.508, as well as Adobe AIR before 18.0.0.199 and AIR SDK before 18.0.0.199 (and SDK & Compiler before 18.0.0.199). The vulnerability arises ...

CVE-2015-5569

CVE-2015-5569 affects Adobe Flash Player (and related AIR components) via an improper implementation of the Flash broker API, with unspecified impact in the initial description. Public details in connected sources indicate multiple vulnerabilities (APSB15-25) and patches across platforms: Flash P...

CVE-2015-8451

CVE-2015-8451 affects Adobe Flash Player and Adobe AIR suites. The description indicates arbitrary code execution or memory corruption via unspecified vectors in Flash Player versions prior to 18.0.0.268, 19.x, and 20.x before 20.0.0.228 on Windows/OS X, and prior to 11.2.202.554 on Linux, plus A...

CVE-2016-0962

CVE-2016-0962 is a memory corruption vulnerability affecting multiple Adobe products. Connected sources confirm exploitable conditions in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/OS X; Linux before 11.2.202.577) and Adobe AIR/AIR SDK before 21.0.0.176. The ...

CVE-2016-0979

Technical details for CVE-2016-0979 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified. Monitor for updates from connected EUVD records.

CVE-2016-1022

Technical details for CVE-2016-1022 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, versions, impact, or remediation are included here.

CVE-2016-1025

Technical details for CVE-2016-1025 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-1031

CVE-2016-1031 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products include Flash Player on Windows/OS X (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The vulnerability arises from a u...

CVE-2016-4160

Technical details about CVE-2016-4160 are not publicly provided in the supplied documents. No affected products, vulnerable components, or remediation are described here. Monitor for updates from official advisories.

CVE-2016-4232

CVE-2016-4232 is a memory leak in Adobe Flash Player affecting Windows/macOS (Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209) and Linux (before 11.2.202.632). The issue allows attackers to obtain sensitive information from process memory via unspecified vectors; exploitation was o...

CVE-2016-7868

Adobe Flash Player suffers a buffer overflow/underflow in the RegExp class related to alternation, affecting versions 23.0.0.207 and earlier and 11.2.202.644 and earlier. Successful exploitation could lead to arbitrary code execution. Remediation: upgrade to version 24.0.0.186 or newer as the fix...

CVE-2018-4933

CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...

CVE-2009-0522

CVE-2009-0522 affects Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows, where an attacker could trick a user into visiting an arbitrary URL via manipulation of the mouse pointer display (a clickjacking-like issue). Multiple connected sources corroborate the Windows-sp...

CVE-2011-0561

Technical details for CVE-2011-0561 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE feeds.

CVE-2013-1374

CVE-2013-1374 = Use-after-free in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR that permits arbitrary code execution via unspecified vectors; affected versions include Flash Player 10.3.x–11.x before listed builds on various platforms and AIR before 3.6.0.x. Patches were released in A...

CVE-2013-1379

Adobe Flash Player and Adobe AIR contain a vulnerability (CVE-2013-1379) where improper initialization of pointer arrays enables remote code execution or memory corruption. Affected versions span Windows/Mac OS X pre-10.3.183.75 and 11.x prior to 11.7.700.169, Linux pre-11.2.202.280, Android 2.x/...

CVE-2013-3325

Technical details for CVE-2013-3325 are not publicly available in the provided documents. The connected EUVD entries mention malware in sbrugna but do not specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2014-0519

CVE-2014-0519 describes a sandbox security bypass in Adobe Flash Player and AIR components. The flaw affects Flash Player pre-13.0.0.214 on Windows/macOS and pre-11.2.202.359 on Linux, plus AIR SDK before 13.0.0.111, enabling attackers to bypass access restrictions via crafted files opened by a u...

CVE-2014-8443

CVE-2014-8443 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors. Affected products include Adobe Flash Player on Windows, macOS, and Linux, with vulnerable releases prior to 13.0.0.259 (Windows/macOS) and prior to 16.x before 16.0.0....

CVE-2015-0328

Adobe Flash Player CVE-2015-0328 is a NULL pointer dereference vulnerability in Flash Player prior to 13.0.0.269 and 14.x up to 16.x before 16.0.0.305 on Windows/macOS, and prior to 11.2.202.442 on Linux, triggered via unknown vectors (per Adobe APSB15-04). The issue could allow a denial of servi...

CVE-2015-5129

CVE-2015-5129 is a heap-based buffer overflow vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), and in Adobe AIR before 18.0.0.199 (including AIR SDK and SDK & Compiler). The issue enables attackers to execute arbitrary code via unspecified...

CVE-2015-5549

Technical details about CVE-2015-5549 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5562

CVE-2015-5562 describes a type confusion vulnerability in Adobe Flash Player that could allow remote code execution. Affected products and versions per the entry: Flash Player prior to 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux; Adobe AIR prior to 18.0.0.199 and older AIR ...

CVE-2016-0966

Technical details for CVE-2016-0966 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates from connected EUVD entries and official advisories.

CVE-2016-4133

CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...

CVE-2016-4221

Technical details about CVE-2016-4221 are not provided in the connected documents; no product/version/impact specifics are available here. Monitor for updates.

CVE-2011-0608

Technical details about CVE-2011-0608 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates.

CVE-2012-2040

CVE-2012-2040 describes a local privilege escalation in the Adobe Flash Player installer caused by an untrusted search path that could allow a Trojan horse executable in an unspecified directory to run with elevated privileges. The affected products span multiple platforms: Flash Player before 10...

CVE-2012-5259

CVE-2012-5259 is a buffer overflow in Adobe Flash Player and related AIR components that allows arbitrary code execution via unspecified vectors. Affected software includes Flash Player on Windows/Mac OS X (before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before ...

CVE-2013-0639

Adobe Flash Player (and Adobe AIR) contains an integer overflow vulnerability (CVE-2013-0639) that enables arbitrary code execution. Affected are Flash Player versions before 10.3.183.63 / 11.x before 11.6.602.168 on Windows, before 10.3.183.61 / 11.x before 11.6.602.167 on macOS, before 10.3.183...

CVE-2013-1371

Adobe Flash Player and related AIR components were vulnerable to arbitrary code execution or memory corruption via unspecified vectors (CVE-2013-1371). Affected versions included Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/macOS, before 10.3.183.68 and 11.x before 11.2...

CVE-2014-0536

CVE-2014-0536 affects Adobe Flash Player (Windows/macOS: before 13.0.0.223, and 14.x before 14.0.0.125; Linux: before 11.2.202.378) and Adobe AIR/ AIR SDK before 14.0.0.110, with memory corruption enabling arbitrary code execution or DoS via unspecified vectors. Affected components include Flash ...

CVE-2014-0588

CVE-2014-0588 is a use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and before 15.0.0.356 on Windows/OS X, and before 11.2.202.418 on Linux, plus Adobe AIR before 15.0.0.356 (and AIR SDK variants). The issue allows arbitrary code execution via unspecified vectors and ...

CVE-2015-0309

CVE-2015-0309 is a heap-based buffer overflow in Adobe Flash Player prior to 13.0.0.260 and 14.x through 16.x prior to 16.0.0.257 (Windows/OS X) and before 11.2.202.429 (Linux), and in Adobe AIR prior to 16.0.0.245 (Windows/OS X) and before 16.0.0.272 (Android), plus Adobe AIR SDKs before 16.0.0....

CVE-2015-3120

CVE-2015-3120 is a type-confusion vulnerability in Adobe Flash Player that can be reached by setting a watch on a property, demonstrated with FileReferenceList and fileList. The provided documents describe that a watcher triggers during native browse() when the host object is assigned, causing a ...

CVE-2015-3133

Adobe Flash Player and Adobe AIR are affected by CVE-2015-3133. The vulnerability allows remote code execution or memory corruption via unspecified vectors in: Flash Player before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X; Flash Player before 11.2.202.481 on Linux; Adobe AI...