CVE-2015-5129

CVE-2015-5129 is a heap-based buffer overflow vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), and in Adobe AIR before 18.0.0.199 (including AIR SDK and SDK & Compiler). The issue enables attackers to execute arbitrary code via unspecified...

CVE-2015-5573

CVE-2015-5573 is a Type Confusion vulnerability affecting Adobe Flash Player prior to 18.0.0.241 and 19.x prior to 19.0.0.185 on Windows/macOS, and prior to 11.2.202.521 on Linux, plus affected AIR/SDK components. The root cause is a type confusion error that could allow an attacker to execute ar...

CVE-2016-0966

Technical details for CVE-2016-0966 are not publicly available in the provided documents; no affected products, vectors, or fixes are specified here. Monitor for updates from connected EUVD entries and official advisories.

CVE-2016-4221

Technical details about CVE-2016-4221 are not provided in the connected documents; no product/version/impact specifics are available here. Monitor for updates.

CVE-2016-4239

Technical details about CVE-2016-4239 are not publicly available in the provided documents. Monitor for updates.

CVE-2009-0522

CVE-2009-0522 affects Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows, where an attacker could trick a user into visiting an arbitrary URL via manipulation of the mouse pointer display (a clickjacking-like issue). Multiple connected sources corroborate the Windows-sp...

CVE-2009-3797

CVE-2009-3797 affects Adobe Flash Player 10.x (before 10.0.42.34) and Adobe AIR (before 1.5.3); memory corruption could allow arbitrary code execution. The vulnerability is tied to multiple Flash-era CVEs and was addressed by Red Hat open advisories and SUSE/openSUSE/NASLplugin references recomme...

CVE-2011-0577

Adobe Flash Player contains an unspecified vulnerability (CVE-2011-0577) exploitable via a crafted font that allows remote code execution. Affected versions are Flash Player before 10.2.152.26; remediation shown across connected advisories is to update to 10.2.152.26 or later. Details and affecte...

CVE-2012-5259

CVE-2012-5259 is a buffer overflow in Adobe Flash Player and related AIR components that allows arbitrary code execution via unspecified vectors. Affected software includes Flash Player on Windows/Mac OS X (before 10.3.183.29 and 11.x before 11.4.402.287; Linux before 10.3.183.29 and 11.x before ...

CVE-2012-5260

CVE-2012-5260 is a concrete Adobe Flash Player/Adobe AIR vulnerability. It describes a buffer overflow in Flash Player prior to 10.3.183.29 and 11.x prior to 11.4.402.287 on Windows/macOS, Linux before 10.3.183.29 and 11.2.202.243, Android 2.x/3.x before 11.1.111.19, and Android 4.x before 11.1.1...

CVE-2013-3326

Technical details for CVE-2013-3326 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-3330

Technical details for CVE-2013-3330 are not publicly available in the provided connected documents; no affected products, exact vulnerability vectors, impact, or fixes are described here. Monitor for updates.

CVE-2013-3333

Technical details for CVE-2013-3333 are not publicly available in the provided connected documents. Monitor for updates; no concrete product/version/impact data is disclosed here.

CVE-2013-3344

CVE-2013-3344 refers to a heap-based buffer overflow in Adobe Flash Player that could allow arbitrary code execution. According to the description, affected versions include Flash Player on Windows and Mac OS X before 11.7.700.232 and 11.8.x before 11.8.800.94, Linux before 11.2.202.297, Android ...

CVE-2014-0518

Adobe Flash Player vulnerability CVE-2014-0518 (and related CVEs) allows bypass of intended access restrictions via unspecified vectors. Affected products/versions noted in the initial entry: Flash Player for Windows and macOS prior to 13.0.0.214, Flash Player for Linux prior to 11.2.202.359, Ado...

CVE-2014-0582

CVE-2014-0582 is a heap-based buffer overflow in Adobe Flash Player that could lead to remote code execution. The public advisories and Nessus/OpenSUSE summaries reference Flash Player updates to version 11.2.202.418, which fixes multiple memory corruption, type confusion, and heap-related vulner...

CVE-2014-8437

CVE-2014-8437 is an information-disclosure vulnerability in Adobe Flash Player and related AIR components that could allow a remote attacker to disclose session tokens. Affected products include Flash Player on Windows, OS X (before 13.0.0.252 and before 15.0.0.223 on 14.x/15.x), and Linux (befor...

CVE-2015-5562

CVE-2015-5562 describes a type confusion vulnerability in Adobe Flash Player that could allow remote code execution. Affected products and versions per the entry: Flash Player prior to 18.0.0.232 on Windows and OS X, and prior to 11.2.202.508 on Linux; Adobe AIR prior to 18.0.0.199 and older AIR ...

CVE-2015-7635

The CVE-2015-7635 entry describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: before 18.0.0.252 and 19.x before 19.0.0.207; Linux before 11.2.202.535) and Adobe AIR (before 19.0.0.213, including AIR SDK before/Compiler before 19.0.0.213). The underlying issue is a use-aft...

CVE-2016-0968

Technical details for CVE-2016-0968 are not publicly available in the provided documents; connected EUVD entries mention malware without CVE-specific information. Monitor for updates.

CVE-2016-4217

Technical details about CVE-2016-4217 are not provided in the connected documents; the materials do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2016-4234

Technical details about CVE-2016-4234 are not provided in the supplied documents; public information is limited to the general vulnerability description. Monitor for updates.

CVE-2016-4240

Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.

CVE-2017-3079

CVE-2017-3079 affects Adobe Flash Player up to version 26.0.0.126, with a memory corruption vulnerability in the internal representation of raster data that can enable remote arbitrary code execution. Multiple connected advisories confirm this class of flaws (memory corruption/use-after-free) acr...

CVE-2015-7637

Technical details about CVE-2015-7637 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-8406

Technical details for CVE-2015-8406 are not publicly available in the provided documents; monitor for updates from the listed sources.

CVE-2016-4232

CVE-2016-4232 is a memory leak in Adobe Flash Player affecting Windows/macOS (Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209) and Linux (before 11.2.202.632). The issue allows attackers to obtain sensitive information from process memory via unspecified vectors; exploitation was o...

CVE-2010-3638

CVE-2010-3638 refers to an unspecified vulnerability in Adobe Flash Player on Mac OS X (pre-9.0.289.0 and pre-10.1.102.64 for 10.x) when used with Safari. The provided documents do not disclose the exact root cause, exploit details, or affected product families beyond the Mac OS X/Safari context....

CVE-2011-0561

Technical details for CVE-2011-0561 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE feeds.

CVE-2011-0575

CVE-2011-0575 involves an untrusted search path vulnerability in Adobe Flash Player prior to version 10.2.152.26 . An attacker could exploit a Trojan horse DLL placed in the user’s current working directory to gain privileges on the local system. The advisory notes that upgrading to 10.2.152.26 o...

CVE-2012-5673

CVE-2012-5673 affects Adobe Flash Player and Adobe AIR across multiple platforms. Affected are: Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows/Mac; before 11.2.202.243 on Linux; before 11.1.111.19 on Android 2.x/3.x; before 11.1.115.20 on Android 4.x; and Adobe AIR before...

CVE-2014-0519

CVE-2014-0519 describes a sandbox security bypass in Adobe Flash Player and AIR components. The flaw affects Flash Player pre-13.0.0.214 on Windows/macOS and pre-11.2.202.359 on Linux, plus AIR SDK before 13.0.0.111, enabling attackers to bypass access restrictions via crafted files opened by a u...

CVE-2014-8443

CVE-2014-8443 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors. Affected products include Adobe Flash Player on Windows, macOS, and Linux, with vulnerable releases prior to 13.0.0.259 (Windows/macOS) and prior to 16.x before 16.0.0....

CVE-2015-7642

Technical details about this CVE (affected products, versions, root cause, or exploit specifics) are not publicly available in the provided connected documents. Monitor for updates; no concrete remediation or impact details are provided here.

CVE-2015-8823

Technical details about CVE-2015-8823 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-4242

Technical details about CVE-2016-4242 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are specified beyond the general description. Monitor for updates.

CVE-2017-3076

Summary of the finding (CVE-2017-3076) : Adobe Flash Player versions up to and including 25.0.0.171 contain a memory corruption vulnerability in the MPEG-4 AVC module that can lead to arbitrary code execution. Multiple connected advisories confirm this CVE is associated with remote code execution...

CVE-2006-4640

CVE-2006-4640 affects Adobe Flash Player prior to 9.0.16.0. Unspecified vulnerability could allow user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. Connected docs corroborate that this is a Flash Player issue tied to allowScriptAccess bypass; no pu...

CVE-2008-4473

Adobe Flash CS3 Professional on Windows is affected by CVE-2008-4473 due to multiple heap-based buffer overflows in SWF processing caused by extremely long control parameter data in a malicious SWF. The issue, affecting Flash CS3 on Windows and Flash MX 2004, could allow remote code execution. Op...

CVE-2013-0639

Adobe Flash Player (and Adobe AIR) contains an integer overflow vulnerability (CVE-2013-0639) that enables arbitrary code execution. Affected are Flash Player versions before 10.3.183.63 / 11.x before 11.6.602.168 on Windows, before 10.3.183.61 / 11.x before 11.6.602.167 on macOS, before 10.3.183...

CVE-2013-3329

Technical details about CVE-2013-3329 are not publicly available in the provided documents; no product, version, impact or remediation information is included beyond the initial description. Monitor for updates.

CVE-2013-5332

CVE-2013-5332 affects Adobe Flash Player prior to 11.7.700.257/11.8.x/11.9.x before 11.9.900.170 on Windows/macOS, and prior to 11.2.202.332 on Linux, as well as Adobe AIR before 3.9.0.1380 and AIR SDK/SDK & Compiler before 3.9.0.1380. Impact: arbitrary code execution or memory corruption leading...

CVE-2015-7636

CVE-2015-7636 is a use-after-free vulnerability in multiple Adobe products allowing arbitrary code execution. Affected products/versions include: Adobe Flash Player on Windows/macOS prior to 18.0.0.252 and 19.x prior to 19.0.0.207; Linux prior to 11.2.202.535; Adobe AIR prior to 19.0.0.213; Adobe...

CVE-2015-7641

Technical details about CVE-2015-7641 are not publicly available in the provided documents; no affected products, versions, or impact are specified here. Monitor for updates from official advisories.

CVE-2016-1023

Technical details about CVE-2016-1023 are not publicly provided in the connected documents. Monitor for updates; current sources (EUVD entries) contain generic malware notes and do not specify affected products, versions, or remediation.

CVE-2016-1030

Adobe Flash Player is affected by CVE-2016-1030 as a security-bypass vulnerability. Public references in connected docs indicate the issue impacts Adobe Flash Player before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213 on Windows and macOS, and before 11.2.202.616 on Linux, allowing bypass of ...

CVE-2016-4244

The CVE-2016-4244 entry concerns Adobe Flash Player prior to 18.0.0.366 and certain 19.x–22.x builds before 22.0.0.209 on Windows/OS X, and prior to 11.2.202.632 on Linux. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service (memory corruption) via unspecifi...

CVE-2016-4246

Technical details about CVE-2016-4246 are not publicly available in the provided Connected documents. Monitor for updates from official advisories.

CVE-2016-7876

CVE-2016-7876 affects Adobe Flash Player up to version 23.0.0.207 (Windows/macOS) and 11.2.202.644 (Adobe built-in Flash); the issue is a memory corruption in the Clipboard handling code which could enable arbitrary code execution. Mitigations/patches: multiple advisories note fixes in Flash Play...

CVE-2018-4934

CVE-2018-4934 affects Adobe Flash Player ≤ 29.0.0.113, with an exploitable out-of-bounds read that could cause information disclosure. The issue is part of APSB18-08; Red Hat and Gentoo advisories map this to multiple Flash vulnerabilities. Vulnerable files/versions are Flash Player prior to 29.0...