CVE-2012-5261

CVE-2012-5261 affects Adobe Flash Player and Adobe AIR. Affected: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/macOS; Flash Player before 10.3.183.29 and 11.x before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x. Also af...

CVE-2014-0503

CVE-2014-0503 affects Adobe Flash Player; versions prior to 11.7.700.272 (and 11.8.x through 12.0.x before 12.0.0.77) on Windows/macOS and pre-11.2.202.346 on Linux are vulnerable to bypassing the Same Origin Policy via unspecified vectors. Affected users should upgrade to Flash Player 11.2.202.3...

CVE-2014-0548

Summary (CVE-2014-0548) : Adobe Flash Player (and related AIR SDK packages) contains a vulnerability that could allow a remote bypass of the Same Origin Policy. The Mageia advisory MGASA-2014-0382 notes that Flash Player 11.2.202.406 fixes multiple security issues, including a bypass of the same-...

CVE-2014-0555

Technical details about CVE-2014-0555 are not provided in the supplied documents. Monitor for updates from official advisories; no affected products, vectors, or fixes are specified here.

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2015-0328

Adobe Flash Player CVE-2015-0328 is a NULL pointer dereference vulnerability in Flash Player prior to 13.0.0.269 and 14.x up to 16.x before 16.0.0.305 on Windows/macOS, and prior to 11.2.202.442 on Linux, triggered via unknown vectors (per Adobe APSB15-04). The issue could allow a denial of servi...

CVE-2015-3133

Adobe Flash Player and Adobe AIR are affected by CVE-2015-3133. The vulnerability allows remote code execution or memory corruption via unspecified vectors in: Flash Player before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X; Flash Player before 11.2.202.481 on Linux; Adobe AI...

CVE-2015-5549

Technical details about CVE-2015-5549 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5555

CVE-2015-5555 concerns Adobe Flash Player/type confusion. Affected products include Windows and OS X versions prior to 18.0.0.232 and Linux prior to 11.2.202.508, as well as Adobe AIR before 18.0.0.199 and AIR SDK before 18.0.0.199 (and SDK & Compiler before 18.0.0.199). The vulnerability arises ...

CVE-2016-0962

CVE-2016-0962 is a memory corruption vulnerability affecting multiple Adobe products. Connected sources confirm exploitable conditions in Adobe Flash Player (before 18.0.0.333 and 19.x–21.x before 21.0.0.182 on Windows/OS X; Linux before 11.2.202.577) and Adobe AIR/AIR SDK before 21.0.0.176. The ...

CVE-2016-0966

Technical details for CVE-2016-0966 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates from connected EUVD entries and official advisories.

CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2016-4160

Technical details about CVE-2016-4160 are not publicly provided in the supplied documents. No affected products, vulnerable components, or remediation are described here. Monitor for updates from official advisories.

CVE-2016-4189

Technical details for CVE-2016-4189 are not publicly provided in the supplied documents; no affected products, versions, or remediation information are present. Monitor for updates.

CVE-2016-4247

Adobe Flash Player contains a race condition vulnerability (CVE-2016-4247) that could lead to information disclosure. Affected versions include Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X and before 11.2.202.632 on Linux. Multiple connected advisories/patches (e...

CVE-2018-4920

Adobe Flash Player

CVE-2007-6244

Adobe Flash Player (Flash-plugin) vulnerable to cross-site scripting via asfunction: and navigateToURL in the ActiveX/Plug-in context. Affected: Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0. Root cause: input validation issues when processing SWF parameters and asfunction: usage, per RH...

CVE-2009-1869

CVE-2009-1869 describes an integer overflow in the ActionScript VM 2 (AVM2) abcFile parser in Adobe Flash Player, exploitable via a large intrf_count value that can dereference an out-of-bounds pointer. Affected: Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2...

CVE-2009-1870

CVE-2009-1870 is a local sandbox vulnerability in Adobe Flash Player (affecting Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2) that could disclose sensitive information when a SWF is saved to the user’s hard drive. Connected advisories confirm Red Hat and ot...

CVE-2012-5257

CVE-2012-5257 is a buffer overflow in Adobe Flash Player (Windows/Mac/Linux/Android) prior to the specified patched versions, and in Adobe AIR prior to 3.4.0.2710. The vulnerability allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.29 ...

CVE-2012-5265

CVE-2012-5265 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player on Windows/Mac before 10.3.183.29 and before 11.4.402.287 for 11.x, Linux before 11.2.202.243, Android 2.x/3.x befor...

CVE-2012-5276

CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...

CVE-2012-5279

Adobe Flash Player and Adobe AIR are affected by CVE-2012-5279. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors. Affected: Flash Player on Windows/Mac (before 10.3.183.43 and 11.x before 11.5.502.110), Linux (before 10.3.183.43 and 11.x before 11.2.2...

CVE-2013-3332

Technical details are not publicly available in the provided documents. Monitor for updates from the sources; no specific affected products, versions, or fixes are disclosed here.

CVE-2014-0588

CVE-2014-0588 is a use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and before 15.0.0.356 on Windows/OS X, and before 11.2.202.418 on Linux, plus Adobe AIR before 15.0.0.356 (and AIR SDK variants). The issue allows arbitrary code execution via unspecified vectors and ...

CVE-2014-0589

CVE-2014-0589 is a heap-based buffer overflow in Adobe Flash Player that enables arbitrary code execution. Affected: Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/OS X, and before 11.2.202.418 on Linux; Adobe AIR before 15.0.0.356 (AIR SDK and Compiler before 15.0.0.356) wi...

CVE-2015-0304

CVE-2015-0304 is described in connected advisories as a heap-based buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/...

CVE-2015-3120

CVE-2015-3120 is a type-confusion vulnerability in Adobe Flash Player that can be reached by setting a watch on a property, demonstrated with FileReferenceList and fileList. The provided documents describe that a watcher triggers during native browse() when the host object is assigned, causing a ...

CVE-2015-5562

CVE-2015-5562 describes a type confusion vulnerability in Adobe Flash Player that could allow remote code execution. Affected products and versions per the entry: Flash Player prior to 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux; Adobe AIR prior to 18.0.0.199 and older AIR ...

CVE-2015-5569

CVE-2015-5569 affects Adobe Flash Player (and related AIR components) via an improper implementation of the Flash broker API, with unspecified impact in the initial description. Public details in connected sources indicate multiple vulnerabilities (APSB15-25) and patches across platforms: Flash P...

CVE-2015-8406

Technical details for CVE-2015-8406 are not publicly available in the provided documents; monitor for updates from the listed sources.

CVE-2015-8653

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2016-0979

Technical details for CVE-2016-0979 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified. Monitor for updates from connected EUVD records.

CVE-2016-1022

Technical details for CVE-2016-1022 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, versions, impact, or remediation are included here.

CVE-2016-4133

CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...

CVE-2016-4221

Technical details about CVE-2016-4221 are not provided in the connected documents; no product/version/impact specifics are available here. Monitor for updates.

CVE-2016-4240

Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.

CVE-2007-2022

CVE-2007-2022 describes a vulnerability in Adobe Flash Player used with Linux browsers (Opera < 9.20 or Konqueror

CVE-2007-6242

CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...

CVE-2008-1655

CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...

CVE-2012-5259

CVE-2012-5259 is a buffer overflow in Adobe Flash Player and related AIR components that allows arbitrary code execution via unspecified vectors. Affected software includes Flash Player on Windows/Mac OS X (before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before ...

CVE-2012-5287

CVE-2012-5287 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected are Flash Player on Windows/Mac (before 10.3.183.29 and 11.x before 11.4.402.287), Linux (before 11.2.202.243 in some builds), Android 2.x/3....

CVE-2013-1371

Adobe Flash Player and related AIR components were vulnerable to arbitrary code execution or memory corruption via unspecified vectors (CVE-2013-1371). Affected versions included Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/macOS, before 10.3.183.68 and 11.x before 11.2...

CVE-2014-0518

Adobe Flash Player vulnerability CVE-2014-0518 (and related CVEs) allows bypass of intended access restrictions via unspecified vectors. Affected products/versions noted in the initial entry: Flash Player for Windows and macOS prior to 13.0.0.214, Flash Player for Linux prior to 11.2.202.359, Ado...

CVE-2014-0519

CVE-2014-0519 describes a sandbox security bypass in Adobe Flash Player and AIR components. The flaw affects Flash Player pre-13.0.0.214 on Windows/macOS and pre-11.2.202.359 on Linux, plus AIR SDK before 13.0.0.111, enabling attackers to bypass access restrictions via crafted files opened by a u...

CVE-2014-0535

CVE-2014-0535 is an Adobe Flash Player and Adobe AIR security bypass vulnerability. It arises from an error in handling specially crafted SWF files, allowing attackers to bypass intended access restrictions. Affected products include Flash Player on Windows/OS X (before 13.0.0.223 and before 14.0...

CVE-2014-0554

CVE-2014-0554 affects Adobe Flash Player and AIR components. The initial entry states a bypass of intended access restrictions via unspecified vectors for: Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 (Windows/OS X) and before 11.2.202.406 (Linux); Flash AIR before 15.0.0.24...

CVE-2015-0309

CVE-2015-0309 is a heap-based buffer overflow in Adobe Flash Player prior to 13.0.0.260 and 14.x through 16.x prior to 16.0.0.257 (Windows/OS X) and before 11.2.202.429 (Linux), and in Adobe AIR prior to 16.0.0.245 (Windows/OS X) and before 16.0.0.272 (Android), plus Adobe AIR SDKs before 16.0.0....

CVE-2015-5129

CVE-2015-5129 is a heap-based buffer overflow vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), and in Adobe AIR before 18.0.0.199 (including AIR SDK and SDK & Compiler). The issue enables attackers to execute arbitrary code via unspecified...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...