CVE-2014-8443

CVE-2014-8443 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors. Affected products include Adobe Flash Player on Windows, macOS, and Linux, with vulnerable releases prior to 13.0.0.259 (Windows/macOS) and prior to 16.x before 16.0.0....

CVE-2015-0309

CVE-2015-0309 is a heap-based buffer overflow in Adobe Flash Player prior to 13.0.0.260 and 14.x through 16.x prior to 16.0.0.257 (Windows/OS X) and before 11.2.202.429 (Linux), and in Adobe AIR prior to 16.0.0.245 (Windows/OS X) and before 16.0.0.272 (Android), plus Adobe AIR SDKs before 16.0.0....

CVE-2015-3120

CVE-2015-3120 is a type-confusion vulnerability in Adobe Flash Player that can be reached by setting a watch on a property, demonstrated with FileReferenceList and fileList. The provided documents describe that a watcher triggers during native browse() when the host object is assigned, causing a ...

CVE-2015-5553

CVE-2015-5553 covers multiple Adobe Flash Player and Adobe AIR components with memory corruption leading to arbitrary code execution or denial of service. Affected software includes Flash Player before 18.0.0.232 on Windows/OSX and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (a...

CVE-2016-4163

Technical details about CVE-2016-4163 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the EUVD entries reference malware but do not clarify product/version specifics or vulnerability mechanics.

CVE-2016-4180

Technical details (affected product/version, root cause, exploit information, and remediation) are not publicly available in the provided Connected/EUVD documents. Monitor for updates.

CVE-2011-0577

Adobe Flash Player contains an unspecified vulnerability (CVE-2011-0577) exploitable via a crafted font that allows remote code execution. Affected versions are Flash Player before 10.2.152.26; remediation shown across connected advisories is to update to 10.2.152.26 or later. Details and affecte...

CVE-2011-0608

Technical details about CVE-2011-0608 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates.

CVE-2012-5287

CVE-2012-5287 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected are Flash Player on Windows/Mac (before 10.3.183.29 and 11.x before 11.4.402.287), Linux (before 11.2.202.243 in some builds), Android 2.x/3....

CVE-2013-0639

Adobe Flash Player (and Adobe AIR) contains an integer overflow vulnerability (CVE-2013-0639) that enables arbitrary code execution. Affected are Flash Player versions before 10.3.183.63 / 11.x before 11.6.602.168 on Windows, before 10.3.183.61 / 11.x before 11.6.602.167 on macOS, before 10.3.183...

CVE-2013-3330

Technical details for CVE-2013-3330 are not publicly available in the provided connected documents; no affected products, exact vulnerability vectors, impact, or fixes are described here. Monitor for updates.

CVE-2013-3344

CVE-2013-3344 refers to a heap-based buffer overflow in Adobe Flash Player that could allow arbitrary code execution. According to the description, affected versions include Flash Player on Windows and Mac OS X before 11.7.700.232 and 11.8.x before 11.8.800.94, Linux before 11.2.202.297, Android ...

CVE-2016-1023

Technical details about CVE-2016-1023 are not publicly provided in the connected documents. Monitor for updates; current sources (EUVD entries) contain generic malware notes and do not specify affected products, versions, or remediation.

CVE-2016-4234

Technical details about CVE-2016-4234 are not provided in the supplied documents; public information is limited to the general vulnerability description. Monitor for updates.

CVE-2016-4244

The CVE-2016-4244 entry concerns Adobe Flash Player prior to 18.0.0.366 and certain 19.x–22.x builds before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service (memory corruption) via unspecifi...

CVE-2016-4246

Technical details about CVE-2016-4246 are not publicly available in the provided Connected documents. Monitor for updates from official advisories.

CVE-2016-7876

CVE-2016-7876 affects Adobe Flash Player up to version 23.0.0.207 (Windows/macOS) and 11.2.202.644 (Adobe built-in Flash); the issue is a memory corruption in the Clipboard handling code which could enable arbitrary code execution. Mitigations/patches: multiple advisories note fixes in Flash Play...

CVE-2018-4934

CVE-2018-4934 affects Adobe Flash Player ≤ 29.0.0.113, with an exploitable out-of-bounds read that could cause information disclosure. The issue is part of APSB18-08; Red Hat and Gentoo advisories map this to multiple Flash vulnerabilities. Vulnerable files/versions are Flash Player prior to 29.0...

CVE-2008-4473

Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

CVE-2011-0575

CVE-2011-0575 involves an untrusted search path vulnerability in Adobe Flash Player prior to version 10.2.152.26 . An attacker could exploit a Trojan horse DLL placed in the user’s current working directory to gain privileges on the local system. The advisory notes that upgrading to 10.2.152.26 o...

CVE-2012-5260

CVE-2012-5260 is a concrete Adobe Flash Player/Adobe AIR vulnerability. It describes a buffer overflow in Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, Linux before 10.3.183.29 and 11.2.202.243, Android 2.x/3.x before 11.1.111.19, and Android 4.x before 11.1.1...

CVE-2013-3326

Technical details for CVE-2013-3326 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-3327

Technical details for CVE-2013-3327 are not publicly available in the provided connected documents. Please monitor for updates from official advisories; current sources here reference multiple related CVEs but provide no implementation specifics.

CVE-2014-0554

CVE-2014-0554 affects Adobe Flash Player and AIR components. The initial entry states a bypass of intended access restrictions via unspecified vectors for: Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 (Windows/OS X) and before 11.2.202.406 (Linux); Flash AIR before 15.0.0.24...

CVE-2015-0304

CVE-2015-0304 is described in connected advisories as a heap-based buffer overflow in Adobe Flash Player and Adobe AIR that enables arbitrary code execution via unspecified vectors. Affected products/versions include Flash Player before 13.0.0.260 and 14.x up to 16.x before 16.0.0.257 on Windows/...

CVE-2015-8823

Technical details about CVE-2015-8823 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0968

Technical details for CVE-2016-0968 are not publicly available in the provided documents; connected EUVD entries mention malware without CVE-specific information. Monitor for updates.

CVE-2016-4236

Technical details (affected products, vulnerable components, exploit vectors, and remediation) are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2017-3079

CVE-2017-3079 affects Adobe Flash Player up to version 26.0.0.126, with a memory corruption vulnerability in the internal representation of raster data that can enable remote arbitrary code execution. Multiple connected advisories confirm this class of flaws (memory corruption/use-after-free) acr...

CVE-2006-3587

CVE-2006-3587 is one of several remote-code-execution vulnerabilities in Macromedia/Adobe Flash Player, arising from memory-corruption in handling SWF files. Affected versions include Flash Player 8.0.24.0; exploitation could occur via specially crafted SWF files delivered over the web or via ema...

CVE-2011-0574

CVE-2011-0574 affects Adobe Flash Player before 10.2.152.26. The vulnerability allows attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors, distinct from other CVEs listed in the entry.

CVE-2012-5248

CVE-2012-5248 describes a buffer overflow in Adobe Flash Player (affecting Windows, Mac, Linux, Android) prior to the listed fixed versions (e.g., Flash Player 10.3.183.29/11.x up to 11.4.402.287 on desktop, 11.2.202.243 on some Linux/OpenSUSE advisories, 11.1.111.19/11.1.115.20 on Android) and A...

CVE-2012-5280

CVE-2012-5280 is a Flash Player buffer overflow affecting Windows, Mac OS X, Linux, and Android (and Adobe AIR), with remediation noted in openSUSE/SUSE advisories as a fix in Flash Player 11.2.202.251+ (and related updates). The connected sources confirm a set of Flash vulnerabilities addressed ...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...

CVE-2015-7637

Technical details about CVE-2015-7637 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-8653

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-8657

Technical details for CVE-2015-8657 are not publicly available in the provided connected documents; no specific affected products, root cause, or remediation are disclosed here; monitor for updates.

CVE-2016-1030

Adobe Flash Player is affected by CVE-2016-1030 as a security-bypass vulnerability. Public references in connected docs indicate the issue impacts Adobe Flash Player before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213 on Windows and macOS, and before 11.2.202.616 on Linux, allowing bypass of ...

CVE-2016-4242

Technical details about CVE-2016-4242 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are specified beyond the general description. Monitor for updates.

CVE-2016-4249

Adobe Flash Player vulnerability CVE-2016-4249 is a heap-based buffer overflow that potentially allows arbitrary code execution. The connected advisories confirm affected versions: Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux prior to 11.2.202.632....

CVE-2009-3797

CVE-2009-3797 affects Adobe Flash Player 10.x (before 10.0.42.34) and Adobe AIR (before 1.5.3); memory corruption could allow arbitrary code execution. The vulnerability is tied to multiple Flash-era CVEs and was addressed by Red Hat open advisories and SUSE/openSUSE/NASLplugin references recomme...

CVE-2011-0628

CVE-2011-0628 : An integer overflow in Adobe Flash Player allows remote code execution via ActionScript when handling a long array object. Affected versions are Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is triggered by proc...

CVE-2013-3333

Technical details for CVE-2013-3333 are not publicly available in the provided connected documents. Monitor for updates; no concrete product/version/impact data is disclosed here.

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8442

Adobe Flash Player (and related AIR components) versions prior to the patches cited in CVE-2014-8442 suffer from an incorrect permission configuration that enables an attacker to escalate from Low to Medium integrity. The CVE is described as a privilege-escalation issue caused by permission handl...

CVE-2015-7636

CVE-2015-7636 is a use-after-free vulnerability in multiple Adobe products allowing arbitrary code execution. Affected products/versions include: Adobe Flash Player on Windows/macOS prior to 18.0.0.252 and 19.x prior to 19.0.0.207; Linux prior to 11.2.202.535; Adobe AIR prior to 19.0.0.213; Adobe...

CVE-2015-7642

Technical details about this CVE (affected products, versions, root cause, or exploit specifics) are not publicly available in the provided connected documents. Monitor for updates; no concrete remediation or impact details are provided here.

CVE-2017-3076

Summary of the finding (CVE-2017-3076) : Adobe Flash Player versions up to and including 25.0.0.171 contain a memory corruption vulnerability in the MPEG-4 AVC module that can lead to arbitrary code execution. Multiple connected advisories confirm this CVE is associated with remote code execution...

CVE-2007-5476

Technical details about CVE-2007-5476 are not publicly available in the provided documents. No concrete product/version/impact/exploit information is present. Monitor for updates from authoritative sources to obtain specifics.