CVE-2015-7635

The CVE-2015-7635 entry describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: before 18.0.0.252 and 19.x before 19.0.0.207; Linux before 11.2.202.535) and Adobe AIR (before 19.0.0.213, including AIR SDK before/Compiler before 19.0.0.213). The underlying issue is a use-aft...

CVE-2016-0968

Technical details for CVE-2016-0968 are not publicly available in the provided documents; connected EUVD entries mention malware without CVE-specific information. Monitor for updates.

CVE-2016-1020

Adobe Flash Player vulnerable versions: Windows/OS X — prior to 18.0.0.343 and prior to 21.x before 21.0.0.213; Linux — before 11.2.202.616. Root cause is described as memory corruption enabling arbitrary code execution or DoS via unspecified vectors; exact exploit details are not provided in the...

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4217

Technical details about CVE-2016-4217 are not provided in the connected documents; the materials do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2016-4232

CVE-2016-4232 is a memory leak in Adobe Flash Player affecting Windows/macOS (Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209) and Linux (before 11.2.202.632). The issue allows attackers to obtain sensitive information from process memory via unspecified vectors; exploitation was o...

CVE-2018-4933

CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...

CVE-2006-4640

CVE-2006-4640 affects Adobe Flash Player prior to 9.0.16.0. Unspecified vulnerability could allow user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. Connected docs corroborate that this is a Flash Player issue tied to allowScriptAccess bypass; no pu...

CVE-2011-0561

Technical details for CVE-2011-0561 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE feeds.

CVE-2011-0608

Technical details about CVE-2011-0608 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates.

CVE-2012-5248

CVE-2012-5248 describes a buffer overflow in Adobe Flash Player (affecting Windows, Mac, Linux, Android) prior to the listed fixed versions (e.g., Flash Player 10.3.183.29/11.x up to 11.4.402.287 on desktop, 11.2.202.243 on some Linux/OpenSUSE advisories, 11.1.111.19/11.1.115.20 on Android) and A...

CVE-2013-0639

Adobe Flash Player (and Adobe AIR) contains an integer overflow vulnerability (CVE-2013-0639) that enables arbitrary code execution. Affected are Flash Player versions before 10.3.183.63 / 11.x before 11.6.602.168 on Windows, before 10.3.183.61 / 11.x before 11.6.602.167 on macOS, before 10.3.183...

CVE-2013-3325

Technical details for CVE-2013-3325 are not publicly available in the provided documents. The connected EUVD entries mention malware in sbrugna but do not specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2013-3333

Technical details for CVE-2013-3333 are not publicly available in the provided connected documents. Monitor for updates; no concrete product/version/impact data is disclosed here.

CVE-2014-8443

CVE-2014-8443 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors. Affected products include Adobe Flash Player on Windows, macOS, and Linux, with vulnerable releases prior to 13.0.0.259 (Windows/macOS) and prior to 16.x before 16.0.0....

CVE-2016-4234

Technical details about CVE-2016-4234 are not provided in the supplied documents; public information is limited to the general vulnerability description. Monitor for updates.

CVE-2009-0522

CVE-2009-0522 affects Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows, where an attacker could trick a user into visiting an arbitrary URL via manipulation of the mouse pointer display (a clickjacking-like issue). Multiple connected sources corroborate the Windows-sp...

CVE-2010-3637

CVE-2010-3637 concerns an unspecified ActiveX control in Adobe Flash Player on Windows. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption DoS via a crafted FLV video. Affected products include Flash Player before 9.0.289.0 and the Flash10h.ocx compon...

CVE-2011-0577

Adobe Flash Player contains an unspecified vulnerability (CVE-2011-0577) exploitable via a crafted font that allows remote code execution. Affected versions are Flash Player before 10.2.152.26; remediation shown across connected advisories is to update to 10.2.152.26 or later. Details and affecte...

CVE-2012-2040

CVE-2012-2040 describes a local privilege escalation in the Adobe Flash Player installer caused by an untrusted search path that could allow a Trojan horse executable in an unspecified directory to run with elevated privileges. The affected products span multiple platforms: Flash Player before 10...

CVE-2013-3327

Technical details for CVE-2013-3327 are not publicly available in the provided connected documents. Please monitor for updates from official advisories; current sources here reference multiple related CVEs but provide no implementation specifics.

CVE-2013-3344

CVE-2013-3344 refers to a heap-based buffer overflow in Adobe Flash Player that could allow arbitrary code execution. According to the description, affected versions include Flash Player on Windows and Mac OS X before 11.7.700.232 and 11.8.x before 11.8.800.94, Linux before 11.2.202.297, Android ...

CVE-2016-4236

Technical details (affected products, vulnerable components, exploit vectors, and remediation) are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2010-3638

CVE-2010-3638 refers to an unspecified vulnerability in Adobe Flash Player on Mac OS X (pre-9.0.289.0 and pre-10.1.102.64 for 10.x) when used with Safari. The provided documents do not disclose the exact root cause, exploit details, or affected product families beyond the Mac OS X/Safari context....

CVE-2012-5260

CVE-2012-5260 is a concrete Adobe Flash Player/Adobe AIR vulnerability. It describes a buffer overflow in Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, Linux before 10.3.183.29 and 11.2.202.243, Android 2.x/3.x before 11.1.111.19, and Android 4.x before 11.1.1...

CVE-2013-3326

Technical details for CVE-2013-3326 are not publicly available in the provided connected documents; monitor for updates.

CVE-2014-0536

CVE-2014-0536 affects Adobe Flash Player (Windows/macOS: before 13.0.0.223, and 14.x before 14.0.0.125; Linux: before 11.2.202.378) and Adobe AIR/ AIR SDK before 14.0.0.110, with memory corruption enabling arbitrary code execution or DoS via unspecified vectors. Affected components include Flash ...

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8442

Adobe Flash Player (and related AIR components) versions prior to the patches cited in CVE-2014-8442 suffer from an incorrect permission configuration that enables an attacker to escalate from Low to Medium integrity. The CVE is described as a privilege-escalation issue caused by permission handl...

CVE-2015-7637

Technical details about CVE-2015-7637 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-7640

Technical details about CVE-2015-7640 are not publicly available in the provided documents; monitor for updates.

CVE-2015-7642

Technical details about this CVE (affected products, versions, root cause, or exploit specifics) are not publicly available in the provided connected documents. Monitor for updates; no concrete remediation or impact details are provided here.

CVE-2016-1023

Technical details about CVE-2016-1023 are not publicly provided in the connected documents. Monitor for updates; current sources (EUVD entries) contain generic malware notes and do not specify affected products, versions, or remediation.

CVE-2016-4180

Technical details (affected product/version, root cause, exploit information, and remediation) are not publicly available in the provided Connected/EUVD documents. Monitor for updates.

CVE-2016-4242

Technical details about CVE-2016-4242 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are specified beyond the general description. Monitor for updates.

CVE-2016-4244

The CVE-2016-4244 entry concerns Adobe Flash Player prior to 18.0.0.366 and certain 19.x–22.x builds before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service (memory corruption) via unspecifi...

CVE-2016-4246

Technical details about CVE-2016-4246 are not publicly available in the provided Connected documents. Monitor for updates from official advisories.

CVE-2018-4934

CVE-2018-4934 affects Adobe Flash Player ≤ 29.0.0.113, with an exploitable out-of-bounds read that could cause information disclosure. The issue is part of APSB18-08; Red Hat and Gentoo advisories map this to multiple Flash vulnerabilities. Vulnerable files/versions are Flash Player prior to 29.0...

CVE-2006-3588

CVE-2006-3588 is part of multiple Macromedia/Adobe Flash Player vulnerabilities (along with CVE-2006-3311, CVE-2006-3587, CVE-2006-4640) that could allow remote code execution via specially crafted SWF content. Technical details across connected feeds identify Flash Player in widely used releases...

CVE-2009-3797

CVE-2009-3797 affects Adobe Flash Player 10.x (before 10.0.42.34) and Adobe AIR (before 1.5.3); memory corruption could allow arbitrary code execution. The vulnerability is tied to multiple Flash-era CVEs and was addressed by Red Hat open advisories and SUSE/openSUSE/NASLplugin references recomme...

CVE-2011-0628

CVE-2011-0628 : An integer overflow in Adobe Flash Player allows remote code execution via ActionScript when handling a long array object. Affected versions are Flash Player before 10.3.181.14 on Windows, macOS, Linux, and Solaris, and before 10.3.185.21 on Android. The issue is triggered by proc...

CVE-2013-3330

Technical details for CVE-2013-3330 are not publicly available in the provided connected documents; no affected products, exact vulnerability vectors, impact, or fixes are described here. Monitor for updates.

CVE-2013-5332

CVE-2013-5332 affects Adobe Flash Player prior to 11.7.700.257/11.8.x/11.9.x before 11.9.900.170 on Windows/macOS, and prior to 11.2.202.332 on Linux, as well as Adobe AIR before 3.9.0.1380 and AIR SDK/SDK & Compiler before 3.9.0.1380. Impact: arbitrary code execution or memory corruption leading...

CVE-2015-8823

Technical details about CVE-2015-8823 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-1030

Adobe Flash Player is affected by CVE-2016-1030 as a security-bypass vulnerability. Public references in connected docs indicate the issue impacts Adobe Flash Player before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213 on Windows and macOS, and before 11.2.202.616 on Linux, allowing bypass of ...

CVE-2016-4249

Adobe Flash Player vulnerability CVE-2016-4249 is a heap-based buffer overflow that potentially allows arbitrary code execution. The connected advisories confirm affected versions: Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux prior to 11.2.202.632....

CVE-2016-7876

CVE-2016-7876 affects Adobe Flash Player up to version 23.0.0.207 (Windows/macOS) and 11.2.202.644 (Adobe built-in Flash); the issue is a memory corruption in the Clipboard handling code which could enable arbitrary code execution. Mitigations/patches: multiple advisories note fixes in Flash Play...

CVE-2017-3079

CVE-2017-3079 affects Adobe Flash Player up to version 26.0.0.126, with a memory corruption vulnerability in the internal representation of raster data that can enable remote arbitrary code execution. Multiple connected advisories confirm this class of flaws (memory corruption/use-after-free) acr...

CVE-2008-4473

Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...

CVE-2009-3800

The CVE-2009-3800 entry describes multiple vulnerabilities in Adobe Flash Player prior to 10.0.42.34 and Adobe AIR prior to 1.5.3, which could cause an application crash or possibly allow arbitrary code execution via unknown vectors (denial of service and remote code execution impacts). Connected...