CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2016-4183

CVE-2016-4183 affects Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux. It enables arbitrary code execution or a memory-corruption-based denial of service via unspecified vectors, and is distinct from CVE-2016-4172, -4...

CVE-2016-4233

Technical details about CVE-2016-4233 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories."

CVE-2016-4235

Technical details about CVE-2016-4235 are not provided in the submitted documents; no affected products, root cause, or remediation are listed. Monitor for updates from official advisories.

CVE-2018-12826

Adobe Flash Player prior to 30.0.0.154 is affected by CVE-2018-12826, an out-of-bounds read vulnerability that could lead to information disclosure. Affected products include Flash Player components up to version 30.0.0.134 (and related plugin cases noted in APSB18-25). Red Hat’s RHSA-2018:2435 c...

CVE-2008-1655

CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...

CVE-2009-1866

The CVE-2009-1866 entry describes a stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and in Flash Player 10.x before 10.0.32.18, plus Adobe AIR before 1.5.2, that could cause a denial of service (crash) or possibly allow arbitrary code execution via unspecified vectors. The conn...

CVE-2009-1869

CVE-2009-1869 describes an integer overflow in the ActionScript VM 2 (AVM2) abcFile parser in Adobe Flash Player, exploitable via a large intrf_count value that can dereference an out-of-bounds pointer. Affected: Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

CVE-2011-2456

CVE-2011-2456 refers to a buffer overflow in Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (and on Android prior to 11.1.102.59) that allows an attacker to execute arbitrary code via unspecified vectors. Impact is complete compromise of affected host. Mitigation exists: up...

CVE-2012-2040

CVE-2012-2040 describes a local privilege escalation in the Adobe Flash Player installer caused by an untrusted search path that could allow a Trojan horse executable in an unspecified directory to run with elevated privileges. The affected products span multiple platforms: Flash Player before 10...

CVE-2012-5252

CVE-2012-5252 affects Adobe Flash Player and Adobe AIR. The vulnerability is described as memory corruption that can allow arbitrary code execution or a denial of service via unspecified vectors. Affected components include Flash Player versions prior to 10.3.183.29 and 11.x prior to 11.4.402.287...

CVE-2012-5257

CVE-2012-5257 is a buffer overflow in Adobe Flash Player (Windows/Mac/Linux/Android) prior to the specified patched versions, and in Adobe AIR prior to 3.4.0.2710. The vulnerability allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player before 10.3.183.29 ...

CVE-2012-5265

CVE-2012-5265 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player on Windows/Mac before 10.3.183.29 and before 11.4.402.287 for 11.x, Linux before 11.2.202.243, Android 2.x/3.x befor...

CVE-2013-1371

Adobe Flash Player and related AIR components were vulnerable to arbitrary code execution or memory corruption via unspecified vectors (CVE-2013-1371). Affected versions included Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows/macOS, before 10.3.183.68 and 11.x before 11.2...

CVE-2013-3325

Technical details for CVE-2013-3325 are not publicly available in the provided documents. The connected EUVD entries mention malware in sbrugna but do not specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2014-0535

CVE-2014-0535 is an Adobe Flash Player and Adobe AIR security bypass vulnerability. It arises from an error in handling specially crafted SWF files, allowing attackers to bypass intended access restrictions. Affected products include Flash Player on Windows/OS X (before 13.0.0.223 and before 14.0...

CVE-2014-0589

CVE-2014-0589 is a heap-based buffer overflow in Adobe Flash Player that enables arbitrary code execution. Affected: Flash Player before 13.0.0.252 and 14.x before 15.0.0.223 on Windows/OS X, and before 11.2.202.418 on Linux; Adobe AIR before 15.0.0.356 (AIR SDK and Compiler before 15.0.0.356) wi...

CVE-2014-8442

Adobe Flash Player (and related AIR components) versions prior to the patches cited in CVE-2014-8442 suffer from an incorrect permission configuration that enables an attacker to escalate from Low to Medium integrity. The CVE is described as a privilege-escalation issue caused by permission handl...

CVE-2015-0304

CVE-2015-0304 is described in connected advisories as a heap-based buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/...

CVE-2015-0323

CVE-2015-0323 is a heap-based buffer overflow in Adobe Flash Player that allows arbitrary code execution. Affected: Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows/macOS; before 11.2.202.442 on Linux. Root cause: heap buffer overflow; vector unspecified. Remediat...

CVE-2016-1020

Adobe Flash Player vulnerable versions: Windows/OS X — prior to 18.0.0.343 and prior to 21.x before 21.0.0.213; Linux — before 11.2.202.616. Root cause is described as memory corruption enabling arbitrary code execution or DoS via unspecified vectors; exact exploit details are not provided in the...

CVE-2016-1031

CVE-2016-1031 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products include Flash Player on Windows/OS X (before 18.0.0.343 and 19.x through 21.x before 21.0.0.213) and on Linux (before 11.2.202.616). The vulnerability arises from a u...

CVE-2016-4186

Adobe Flash Player prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209 on Windows/macOS, and before 11.2.202.632 on Linux, is affected by CVE-2016-4186 via unspecified vectors, potentially enabling arbitrary code execution or memory corruption. Connected sources do not specify the exact exp...

CVE-2016-4189

Technical details for CVE-2016-4189 are not publicly provided in the supplied documents; no affected products, versions, or remediation information are present. Monitor for updates.

CVE-2016-7878

CVE-2016-7878 affects Adobe Flash Player (PC/Linux) with use-after-free in the PSDK MediaPlayer class, enabling arbitrary code execution. Affected versions: Flash Player 23.0.0.207 and earlier (Windows/other builds indicated in CVE list). Public advisories confirm the flaw and note escalation to ...

CVE-2018-12828

Adobe Flash Player

CVE-2018-4920

Adobe Flash Player

CVE-2007-6242

CVE-2007-6242 is a vulnerability in Adobe Flash Player (browser plug-in) up to version 9.0.48.0, described as an input-validation issue in parsing certain SWF content that can lead to remote arbitrary-code execution. The connected Red Hat advisory RHSA-2007:1126 confirms multiple input-validation...

CVE-2010-2183

CVE-2010-2183 involves an integer overflow in Adobe Flash Player prior to 9.0.277.0 and in the 10.x line prior to 10.1.53.64, and in Adobe AIR prior to 2.0.2.12610. The overflow could allow an attacker to execute arbitrary code via unspecified vectors. This is a distinct issue from CVE-2010-2170 ...

CVE-2012-5287

CVE-2012-5287 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected are Flash Player on Windows/Mac (before 10.3.183.29 and 11.x before 11.4.402.287), Linux (before 11.2.202.243 in some builds), Android 2.x/3....

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2013-1374

CVE-2013-1374 = Use-after-free in Adobe Flash Player (Windows, macOS, Linux) and Adobe AIR that permits arbitrary code execution via unspecified vectors; affected versions include Flash Player 10.3.x–11.x before listed builds on various platforms and AIR before 3.6.0.x. Patches were released in A...

CVE-2014-0503

CVE-2014-0503 affects Adobe Flash Player; versions prior to 11.7.700.272 (and 11.8.x through 12.0.x before 12.0.0.77) on Windows/macOS and pre-11.2.202.346 on Linux are vulnerable to bypassing the Same Origin Policy via unspecified vectors. Affected users should upgrade to Flash Player 11.2.202.3...

CVE-2014-0536

CVE-2014-0536 affects Adobe Flash Player (Windows/macOS: before 13.0.0.223, and 14.x before 14.0.0.125; Linux: before 11.2.202.378) and Adobe AIR/ AIR SDK before 14.0.0.110, with memory corruption enabling arbitrary code execution or DoS via unspecified vectors. Affected components include Flash ...

CVE-2014-0583

CVE-2014-0583 affects Adobe Flash Player via a heap buffer overflow in the Flash parsing path that can escalate from low to medium integrity. The vulnerability is identified in Flash Player with fixed versions around 11.2.202.418 (and related advisories), and multiple open-source advisories list ...

CVE-2014-0586

Adobe Flash Player vulnerability CVE-2014-0586 is a remote-code-execution type-confusion in the handling of a malformed SWF, affecting Windows/macOS Flash before 13.0.0.252, 14.x/15.x before 15.0.0.223, and Linux Flash before 11.2.202.418; Adobe AIR components are affected as well. Multiple conne...

CVE-2014-0588

CVE-2014-0588 is a use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and before 15.0.0.356 on Windows/OS X, and before 11.2.202.418 on Linux, plus Adobe AIR before 15.0.0.356 (and AIR SDK variants). The issue allows arbitrary code execution via unspecified vectors and ...

CVE-2015-3120

CVE-2015-3120 is a type-confusion vulnerability in Adobe Flash Player that can be reached by setting a watch on a property, demonstrated with FileReferenceList and fileList. The provided documents describe that a watcher triggers during native browse() when the host object is assigned, causing a ...

CVE-2015-5549

Technical details about CVE-2015-5549 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5555

CVE-2015-5555 concerns Adobe Flash Player/type confusion. Affected products include Windows and OS X versions prior to 18.0.0.232 and Linux prior to 11.2.202.508, as well as Adobe AIR before 18.0.0.199 and AIR SDK before 18.0.0.199 (and SDK & Compiler before 18.0.0.199). The vulnerability arises ...

CVE-2015-5587

CVE-2015-5587 is a stack-based buffer overflow in Adobe Flash Player (Windows/macOS: before 18.0.0.241; 19.x before 19.0.0.185; Linux: before 11.2.202.521) and Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190) that allows arbitrary code execution via unspecified vectors. Connec...

CVE-2016-0979

Technical details for CVE-2016-0979 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified. Monitor for updates from connected EUVD records.

CVE-2016-4218

Technical details for CVE-2016-4218 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-4933

CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...

CVE-2007-2022

CVE-2007-2022 describes a vulnerability in Adobe Flash Player used with Linux browsers (Opera < 9.20 or Konqueror

CVE-2011-0608

Technical details about CVE-2011-0608 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates.

CVE-2011-0620

CVE-2011-0620 affects Adobe Flash Player prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, and prior to 10.3.185.21 on Android. The description indicates attackers could execute arbitrary code or cause a memory corruption via unspecified vectors (distinct from CVE-2011-0619/0621/0622...

CVE-2012-5259

CVE-2012-5259 is a buffer overflow in Adobe Flash Player and related AIR components that allows arbitrary code execution via unspecified vectors. Affected software includes Flash Player on Windows/Mac OS X (before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before ...

CVE-2012-5276

CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...