CVE-2015-5131

CVE-2015-5131 describes a buffer overflow in Adobe Flash Player that allows arbitrary code execution on Windows, OS X, and Linux, and affects Adobe AIR (and AIR SDK/Compiler). The vulnerability arises from improper handling during parsing of SWF data, with the root cause identified as a buffer ov...

CVE-2015-7635

The CVE-2015-7635 entry describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: before 18.0.0.252 and 19.x before 19.0.0.207; Linux before 11.2.202.535) and Adobe AIR (before 19.0.0.213, including AIR SDK before/Compiler before 19.0.0.213). The underlying issue is a use-aft...

CVE-2015-8406

Technical details for CVE-2015-8406 are not publicly available in the provided documents; monitor for updates from the listed sources.

CVE-2016-1020

Adobe Flash Player vulnerable versions: Windows/OS X — prior to 18.0.0.343 and prior to 21.x before 21.0.0.213; Linux — before 11.2.202.616. Root cause is described as memory corruption enabling arbitrary code execution or DoS via unspecified vectors; exact exploit details are not provided in the...

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-3588

CVE-2006-3588 is part of multiple Macromedia/Adobe Flash Player vulnerabilities (along with CVE-2006-3311, CVE-2006-3587, CVE-2006-4640) that could allow remote code execution via specially crafted SWF content. Technical details across connected feeds identify Flash Player in widely used releases...

CVE-2009-3797

CVE-2009-3797 affects Adobe Flash Player 10.x (before 10.0.42.34) and Adobe AIR (before 1.5.3); memory corruption could allow arbitrary code execution. The vulnerability is tied to multiple Flash-era CVEs and was addressed by Red Hat open advisories and SUSE/openSUSE/NASLplugin references recomme...

CVE-2011-0577

Adobe Flash Player contains an unspecified vulnerability (CVE-2011-0577) exploitable via a crafted font that allows remote code execution. Affected versions are Flash Player before 10.2.152.26; remediation shown across connected advisories is to update to 10.2.152.26 or later. Details and affecte...

CVE-2012-5287

CVE-2012-5287 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected are Flash Player on Windows/Mac (before 10.3.183.29 and 11.x before 11.4.402.287), Linux (before 11.2.202.243 in some builds), Android 2.x/3....

CVE-2013-3327

Technical details for CVE-2013-3327 are not publicly available in the provided connected documents. Please monitor for updates from official advisories; current sources here reference multiple related CVEs but provide no implementation specifics.

CVE-2013-3332

Technical details are not publicly available in the provided documents. Monitor for updates from the sources; no specific affected products, versions, or fixes are disclosed here.

CVE-2013-3344

CVE-2013-3344 refers to a heap-based buffer overflow in Adobe Flash Player that could allow arbitrary code execution. According to the description, affected versions include Flash Player on Windows and Mac OS X before 11.7.700.232 and 11.8.x before 11.8.800.94, Linux before 11.2.202.297, Android ...

CVE-2015-5587

CVE-2015-5587 is a stack-based buffer overflow in Adobe Flash Player (Windows/macOS: before 18.0.0.241; 19.x before 19.0.0.185; Linux: before 11.2.202.521) and Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190) that allows arbitrary code execution via unspecified vectors. Connec...

CVE-2016-4180

Technical details (affected product/version, root cause, exploit information, and remediation) are not publicly available in the provided Connected/EUVD documents. Monitor for updates.

CVE-2016-4234

Technical details about CVE-2016-4234 are not provided in the supplied documents; public information is limited to the general vulnerability description. Monitor for updates.

CVE-2016-4242

Technical details about CVE-2016-4242 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are specified beyond the general description. Monitor for updates.

CVE-2016-4244

The CVE-2016-4244 entry concerns Adobe Flash Player prior to 18.0.0.366 and certain 19.x–22.x builds before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service (memory corruption) via unspecifi...

CVE-2016-4246

Technical details about CVE-2016-4246 are not publicly available in the provided Connected documents. Monitor for updates from official advisories.

CVE-2018-4934

CVE-2018-4934 affects Adobe Flash Player ≤ 29.0.0.113, with an exploitable out-of-bounds read that could cause information disclosure. The issue is part of APSB18-08; Red Hat and Gentoo advisories map this to multiple Flash vulnerabilities. Vulnerable files/versions are Flash Player prior to 29.0...

CVE-2008-4473

Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...

CVE-2009-3800

The CVE-2009-3800 entry describes multiple vulnerabilities in Adobe Flash Player prior to 10.0.42.34 and Adobe AIR prior to 1.5.3, which could cause an application crash or possibly allow arbitrary code execution via unknown vectors (denial of service and remote code execution impacts). Connected...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

CVE-2013-3333

Technical details for CVE-2013-3333 are not publicly available in the provided connected documents. Monitor for updates; no concrete product/version/impact data is disclosed here.

CVE-2016-4236

Technical details (affected products, vulnerable components, exploit vectors, and remediation) are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2016-4249

Adobe Flash Player vulnerability CVE-2016-4249 is a heap-based buffer overflow that potentially allows arbitrary code execution. The connected advisories confirm affected versions: Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux prior to 11.2.202.632....

CVE-2016-7876

CVE-2016-7876 affects Adobe Flash Player up to version 23.0.0.207 (Windows/macOS) and 11.2.202.644 (Adobe built-in Flash); the issue is a memory corruption in the Clipboard handling code which could enable arbitrary code execution. Mitigations/patches: multiple advisories note fixes in Flash Play...

CVE-2017-3079

CVE-2017-3079 affects Adobe Flash Player up to version 26.0.0.126, with a memory corruption vulnerability in the internal representation of raster data that can enable remote arbitrary code execution. Multiple connected advisories confirm this class of flaws (memory corruption/use-after-free) acr...

CVE-2011-0575

CVE-2011-0575 involves an untrusted search path vulnerability in Adobe Flash Player prior to version 10.2.152.26 . An attacker could exploit a Trojan horse DLL placed in the user’s current working directory to gain privileges on the local system. The advisory notes that upgrading to 10.2.152.26 o...

CVE-2012-5260

CVE-2012-5260 is a concrete Adobe Flash Player/Adobe AIR vulnerability. It describes a buffer overflow in Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, Linux before 10.3.183.29 and 11.2.202.243, Android 2.x/3.x before 11.1.111.19, and Android 4.x before 11.1.1...

CVE-2012-5280

CVE-2012-5280 is a Flash Player buffer overflow affecting Windows, Mac OS X, Linux, and Android (and Adobe AIR), with remediation noted in openSUSE/SUSE advisories as a fix in Flash Player 11.2.202.251+ (and related updates). The connected sources confirm a set of Flash vulnerabilities addressed ...

CVE-2013-3326

Technical details for CVE-2013-3326 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-3330

Technical details for CVE-2013-3330 are not publicly available in the provided connected documents; no affected products, exact vulnerability vectors, impact, or fixes are described here. Monitor for updates.

CVE-2013-5332

CVE-2013-5332 affects Adobe Flash Player prior to 11.7.700.257/11.8.x/11.9.x before 11.9.900.170 on Windows/macOS, and prior to 11.2.202.332 on Linux, as well as Adobe AIR before 3.9.0.1380 and AIR SDK/SDK & Compiler before 3.9.0.1380. Impact: arbitrary code execution or memory corruption leading...

CVE-2014-0554

CVE-2014-0554 affects Adobe Flash Player and AIR components. The initial entry states a bypass of intended access restrictions via unspecified vectors for: Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 (Windows/OS X) and before 11.2.202.406 (Linux); Flash AIR before 15.0.0.24...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...

CVE-2015-7642

Technical details about this CVE (affected products, versions, root cause, or exploit specifics) are not publicly available in the provided connected documents. Monitor for updates; no concrete remediation or impact details are provided here.

CVE-2016-0968

Technical details for CVE-2016-0968 are not publicly available in the provided documents; connected EUVD entries mention malware without CVE-specific information. Monitor for updates.

CVE-2016-1023

Technical details about CVE-2016-1023 are not publicly provided in the connected documents. Monitor for updates; current sources (EUVD entries) contain generic malware notes and do not specify affected products, versions, or remediation.

CVE-2016-1030

Adobe Flash Player is affected by CVE-2016-1030 as a security-bypass vulnerability. Public references in connected docs indicate the issue impacts Adobe Flash Player before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213 on Windows and macOS, and before 11.2.202.616 on Linux, allowing bypass of ...

CVE-2017-3076

Summary of the finding (CVE-2017-3076) : Adobe Flash Player versions up to and including 25.0.0.171 contain a memory corruption vulnerability in the MPEG-4 AVC module that can lead to arbitrary code execution. Multiple connected advisories confirm this CVE is associated with remote code execution...

CVE-2011-0574

CVE-2011-0574 affects Adobe Flash Player before 10.2.152.26. The vulnerability allows attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors, distinct from other CVEs listed in the entry.

CVE-2012-5248

CVE-2012-5248 describes a buffer overflow in Adobe Flash Player (affecting Windows, Mac, Linux, Android) prior to the listed fixed versions (e.g., Flash Player 10.3.183.29/11.x up to 11.4.402.287 on desktop, 11.2.202.243 on some Linux/OpenSUSE advisories, 11.1.111.19/11.1.115.20 on Android) and A...

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8437

CVE-2014-8437 is an information-disclosure vulnerability in Adobe Flash Player and related AIR components that could allow a remote attacker to disclose session tokens. Affected products include Flash Player on Windows, OS X (before 13.0.0.252 and before 15.0.0.223 on 14.x/15.x), and Linux (befor...

CVE-2014-8442

Adobe Flash Player (and related AIR components) versions prior to the patches cited in CVE-2014-8442 suffer from an incorrect permission configuration that enables an attacker to escalate from Low to Medium integrity. The CVE is described as a privilege-escalation issue caused by permission handl...

CVE-2015-7640

Technical details about CVE-2015-7640 are not publicly available in the provided documents; monitor for updates.

CVE-2015-8653

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2006-3587

CVE-2006-3587 is one of several remote-code-execution vulnerabilities in Macromedia/Adobe Flash Player, arising from memory-corruption in handling SWF files. Affected versions include Flash Player 8.0.24.0; exploitation could occur via specially crafted SWF files delivered over the web or via ema...

CVE-2007-3457

Adobe Flash Player 8.x and earlier fails to properly validate HTTP Referer headers, enabling cross‑site request forgery via a crafted SWF (CVE-2007-3457). The CVE entry is supported by multiple connected records noting updates to fix Referer validation and related Flash vulnerabilities (e.g., pat...

CVE-2011-0628

CVE-2011-0628 : An integer overflow in Adobe Flash Player allows remote code execution via ActionScript when handling a long array object. Affected versions are Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is triggered by proc...