1084 matches found
CVE-2013-0643
CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows remote code execution via crafted SWF content. Affected products include Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183....
CVE-2012-0756
Adobe Flash Player vulnerable versions prior to 10.3.183.15 and 11.x prior to 11.1.102.62 on Windows, macOS, Linux, Solaris; and before 11.1.111.6 on Android 2.x/3.x, and before 11.1.115.6 on Android 4.x are affected by CVE-2012-0756, which allows bypassing intended access restrictions via unspec...
CVE-2012-5272
CVE-2012-5272 affects Adobe Flash Player and AIR across multiple platforms. The issue is a memory corruption vulnerability in Flash Player (Windows/macOS/Linux/Android) that could allow arbitrary code execution or a denial of service via unspecified vectors. Affected Flash versions are: Windows/M...
CVE-2012-0772
CVE-2012-0772 affects Windows Flash Player (unspecified ActiveX control) and AIR, where URL security domain checking is mishandled. The issue can lead to arbitrary code execution or memory corruption DoS. Affected versions include Adobe Flash Player prior to 10.3.183.18 and 11.x prior to 11.2.202...
CVE-2017-11213
Adobe Flash Player vulnerability CVE-2017-11213 affects Flash Player 27.0.0.183 and earlier. It arises from a computation reading data past the end of a target buffer due to an integer overflow when creating an arbitrarily sized bitmap, with an invalid out-of-range pointer offset during internal ...
CVE-2018-4877
Adobe Flash Player before 28.0.0.161 contains a use-after-free vulnerability in the Primetime SDK related to media player QoS, identified as CVE-2018-4877. A successful exploiter could achieve arbitrary code execution. Affected products are Flash Player versions prior to 28.0.0.161. Remediation p...
CVE-2014-0559
CVE-2014-0559 describes a heap-based buffer overflow in Adobe Flash Player and AIR, caused by an integer/length handling issue in CopyPixelsToByteArray and related vector data structures. Exploitation relies on manipulating a large ByteArray position to trigger a write past the buffer end, then u...
CVE-2015-0312
Adobe Flash Player contains a double-free vulnerability (CVE-2015-0312) reported to occur when sharing a bytearray between two workers, where one worker calls bytearray.compress() and another uses the same object. The issue can lead to arbitrary code execution and is associated with Adobe’s APSB1...
CVE-2014-0515
CVE-2014-0515 is a buffer overflow in Adobe Flash Player that allowed remote code execution via unspecified vectors. Affected products include Windows/macOS Flash Player versions prior to 11.7.700.279 and 11.8.x up to 13.0.x before 13.0.0.206, and Linux Flash Player prior to 11.2.202.356. The vul...
CVE-2015-5133
Technical details about CVE-2015-5133 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the connected entries reference the CVE but do not disclose specifics here.
CVE-2019-7845
Adobe Flash Player versions 32.0.0.192 and earlier are affected by a use-after-free vulnerability (CVE-2019-7845) that could allow remote arbitrary code execution. The CVE is documented across multiple feeds, with affected products including the Desktop Runtime and browser-integrated Flash Player...
CVE-2015-0332
CVE-2015-0332 affects Adobe Flash Player prior to 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows/OS X, and before 11.2.202.451 on Linux. The vulnerability is a memory corruption flaw that could allow remote code execution or cause a denial of service via unspecified vectors. Connec...
CVE-2015-0336
CVE-2015-0336 : A type confusion vulnerability in Adobe Flash Player’s NetConnection class can lead to arbitrary code execution. Affected products are Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and macOS, and before 11.2.202.451 on Linux. The root cause is d...
CVE-2015-0333
Technical details for CVE-2015-0333 are not publicly available in the provided documents; monitor for updates from advisory sources.
CVE-2012-4171
Adobe Flash Player and Adobe AIR are affected by CVE-2012-4171, a denial-of-service flaw caused by a logic error when handling Firefox dialogs. The vulnerability affects Flash Player on Windows, macOS, Linux, and Android (various pre-allocated builds) and affects Adobe AIR/SDK before the stated b...
CVE-2008-4821
CVE-2008-4821 affects Adobe Flash Player 9.0.124.0 and earlier when used in Mozilla browsers; jar: URL handling could disclose sensitive information. The vulnerability is addressed by Red Hat advisories RHSA-2008:0980/0945, which require upgrading Flash Player to version 9.0.151.0. Exploitation d...
CVE-2015-0359
CVE-2015-0359 is a double-free vulnerability in Adobe Flash Player that can lead to arbitrary code execution via unspecified vectors. Publicly cited affected versions include Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X, and before 11.2.202.457 on Lin...
CVE-2008-4401
CVE-2008-4401 affects Adobe Flash Player 9.0.124.0 and earlier. The issue arises because ActionScript FileReference.browse() and FileReference.download() can be triggered without user interaction, enabling a remote SWF to cause a browse dialog to appear and potentially other impact. Connected adv...
CVE-2008-4818
CVE-2008-4818 is an XSS in Adobe Flash Player related to how HTTP response headers are interpreted. The vulnerability affects Flash Player 9.0.124.0 and earlier. In Red Hat advisories, fixes are delivered via flash-plugin updates: RHSA-2008-0980 for older RHEL3/4/others (updating to Flash Player ...
CVE-2008-4824
CVE-2008-4824 concerns multiple input validation errors in Adobe Flash Player. The vulnerability affects Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 and allows a remote attacker to execute arbitrary code via unspecified vectors. Related advisories (RHSA-2008-0945/0980 and Gentoo ...
CVE-2018-15981
CVE-2018-15981 indicates a type-confusion vulnerability in Adobe Flash Player, affecting versions up to 31.0.0.148 (and earlier). Successful exploitation could lead to arbitrary code execution. Multiple connected advisories confirm the issue and note a fix in upstream version 31.0.0.153 (and late...
CVE-2011-2130
CVE-2011-2130 is a buffer-overflow vulnerability in Adobe Flash Player affecting Windows, Mac OS X, Linux, Solaris (pre-10.3.183.5) and Android (pre-10.3.186.3), and Adobe AIR (pre-2.7.1/2.7.1.1961). It allows arbitrary code execution via unspecified vectors and is separate from CVE-2011-2134, -2...
CVE-2015-0346
CVE-2015-0346 is a double-free vulnerability in Adobe Flash Player that allows arbitrary code execution. Affected products and versions: Windows and OS X builds prior to 13.0.0.281, and 14.x up to 17.x before 17.0.0.169; Linux prior to 11.2.202.457. Root cause: a double-free condition in Flash’s ...
CVE-2008-4823
CVE-2008-4823 affects Adobe Flash Player up to 9.0.124.0, with a vulnerability in how an ActionScript attribute is interpreted that could allow arbitrary HTML/script injection (XSS). Public advisories (RHSA-2008:0945/0980) and Gentoo GLSA-200903-23 list Flash Player updates and note upgrading to ...
CVE-2015-5132
CVE-2015-5132 is a Flash Player buffer overflow vulnerability exploited via parsing of specially crafted SWF files. Affected: Windows/OS X Flash Player < 18.0.0.232; Linux Flash Player
CVE-2019-7090
Adobe Flash Player vulnerable to an out-of-bounds read (CVE-2019-7090) in Desktop Runtime and browser plugins (Flash Player Desktop Runtime 32.0.0.114 and earlier; Chrome/plugin 32.0.0.114 and earlier; Edge/IE11 32.0.0.114 and earlier) that could disclose information. Connected sources confirm th...
CVE-2008-3873
CVE-2008-3873 affects Adobe Flash Player (9.0.124.0 and earlier). The flaw allows a remote, unauthenticated attacker to populate the clipboard with a URL via System.setClipboard, potentially misleading users without interaction. In practice, a malicious SWF could push an attacker-controlled URL t...
CVE-2011-2424
CVE-2011-2424 is listed among Adobe Reader/Flash Player vulnerability advisories (RHSA-2011:1434, RHSA-2011:1144) affecting Adobe Reader and Flash Player where a crafted SWF in PDFs could cause memory corruption and remote code execution. The connected advisories indicate multiple Flash/Reader fl...
CVE-2017-3068
CVE-2017-3068 is an Adobe Flash Player vulnerability affecting versions up to 25.0.0.148 (and earlier) where memory corruption in the Advanced Video Coding (AVC) engine could allow an attacker to execute arbitrary code. Several advisories note a remote code-execution risk via crafted SWF content ...
CVE-2016-4178
CVE-2016-4178 concerns Adobe Flash Player, where a security bypass could lead to information disclosure. The CVE entry covers affected versions on multiple platforms: Windows/OS X builds prior to 18.0.0.366 and 19.x through 22.x prior to 22.0.0.209; Linux builds prior to 11.2.202.632. The vulnera...
CVE-2019-7096
Adobe Flash Player is affected by CVE-2019-7096 (use-after-free leading to arbitrary code execution) and CVE-2019-7108 (out-of-bounds read leading to information disclosure) in versions up to 32.0.0.156. Multiple connected advisories confirm the issues and recommend upgrading to 32.0.0.171 (or la...
CVE-2010-3636
CVE-2010-3636 affects Adobe Flash Player prior to 9.0.289.0 and prior to 10.1.102.64 (for 10.x), across Windows, macOS, Linux, Solaris, and Android. The flaw arises from how Flash parses cross-domain policy files with unspecified encodings, allowing remote web servers to bypass intended access re...
CVE-2007-6243
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 is affected by CVE-2007-6243 due to insufficient restriction of cross-domain policy files, enabling remote cross-domain and cross-site scripting (XSS) attacks. In the connected Red Hat advisories, this issue is list...
CVE-2008-4822
Adobe Flash Player/Flash plugin is affected by CVE-2008-4822, which describes a flaw in interpreting policy files that could bypass a non-root domain policy. Public advisories (e.g., RHSA-2008-0980 for Red Hat systems and GLSA-2009-03-23 for Gentoo) note that Flash policy interpretation issues we...
CVE-2010-0209
CVE-2010-0209 affects Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3. The vulnerability enables arbitrary code execution or memory corruption via unspecified vectors. Connected sources corroborate multiple advisories and patches surrounding this CVE, noti...
CVE-2015-3044
CVE-2015-3044 affects Adobe Flash Player across Windows, macOS and Linux (e.g., Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/macOS; before 11.2.202.457 on Linux). The vulnerability is a access restriction bypass that could leak sensitive data via unspecified vec...
CVE-2017-11281
CVE-2017-11281 affects Adobe Flash Player before version 27.0.0.130 (impacting 26.0.0.151 and earlier). The vulnerability is a memory corruption issue in the text handling path that could allow remote code execution. Public exploit references exist (e.g., Exploit-DB entries) and various advisorie...
CVE-2011-2110
CVE-2011-2110 affects Adobe Flash Player versions prior to 10.3.181.26 (Windows/macOS/Linux/Solaris) and prior to 10.3.185.23 on Android, with a memory corruption flaw that allowed remote code execution or a crash via unspecified vectors; exploitation was observed in the wild in June 2011. The is...
CVE-2015-8068
Technical details about CVE-2015-8068 are not publicly available in the provided connected documents; no concrete affected products, versions, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2016-0998
CVE-2016-0998 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows arbitrary code execution via unspecified vectors on Windows, OS X, and Linux, affecting Flash Player prior to 18.0.0.333 and 19.x–21.x before 21.0.0.182, and AIR before 21.0.0.176. The r...
CVE-2016-4138
CVE-2016-4138 is a buffer overflow vulnerability in Adobe Flash Player 21.0.0.242 and earlier, affecting the Flash runtime used by Microsoft Internet Explorer 10/11 and Edge. Connected sources indicate the issue can enable arbitrary code execution via crafted content (e.g., ATF files) and that ex...
CVE-2009-0520
CVE-2009-0520 affects Adobe Flash Player 9.x prior to 9.0.159.0 and 10.x prior to 10.0.22.87. The issue arises when Flash processing SWF content fails to properly remove references to destroyed objects, enabling remote code execution via a crafted SWF file (buffer overflow-related). Public adviso...
CVE-2010-2188
Technical details about CVE-2010-2188 are not publicly available in the provided connected documents. Monitor for updates in EUVD entries and other sources for concrete information on affected products, impact, and fixes.
CVE-2014-4671
CVE-2014-4671 refers to a Flash/ AIR JSONP CSRF vulnerability where SWF content could bypass restrictions, enabling remote CSRF attacks against JSONP endpoints and potential data exposure. Affected products include Adobe Flash Player (Windows/macOS: up to 13.0.0.231 and 14.x up to 14.0.0.145; Lin...
CVE-2014-8440
CVE-2014-8440 is a memory‑corruption vulnerability in Adobe Flash Player’s ByteArray::UncompressViaZlibVariant that can lead to arbitrary code execution or crash via uninitialized memory. Affected products/versions (per initial description): Flash Player before 13.0.0.252 and 14.x and 15.x before...
CVE-2015-3104
CVE-2015-3104 is an integer overflow in Adobe Flash Player (Windows, macOS, Linux) and related Adobe AIR/SDK components. The flaw allows arbitrary code execution via unspecified vectors and affects Flash Player versions prior to 13.0.0.292, 14.x up to 18.x before 18.0.0.160 (Windows/macOS) and pr...
CVE-2015-7655
Technical details about CVE-2015-7655 are not publicly provided in the connected documents. The EUVD entries mention malware context, but no concrete product versions, root cause, impact, or remediation are detailed here; monitor for updates.
CVE-2015-8634
CVE-2015-8634 describes a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: prior to 18.0.0.324 and 19.x; prior to 20.0.0.267 for 20.x) and Linux prior to 11.2.202.559, as well as in Adobe AIR before 20.0.0.233 (including AIR SDK/Compiler before 20.0.0.233). It allows attackers t...
CVE-2017-2930
CVE-2017-2930 affects Adobe Flash Player versions 24.0.0.186 and earlier. The vulnerability is a memory corruption caused by a concurrency error while manipulating a display list, and is able to lead to arbitrary code execution on a remote host. Exploitation was demonstrated in advisories and exp...