CVE-2017-2930

CVE-2017-2930 affects Adobe Flash Player versions 24.0.0.186 and earlier. The vulnerability is a memory corruption caused by a concurrency error while manipulating a display list, and is able to lead to arbitrary code execution on a remote host. Exploitation was demonstrated in advisories and exp...

CVE-2007-4324

Summary: CVE-2007-4324 affects Adobe Flash Player (and related Flash plugins) where ActionScript/Flash content could be used to determine open ports on a target via timing discrepancies in SecurityErrorEvent handling. Connected advisories (RHSA/RHSA sub-pages) confirm this issue as part of multip...

CVE-2008-4819

CVE-2008-4819 is an unspecified DNS rebinding vulnerability in Adobe Flash Player 9.0.124.0 and earlier. Affected: Flash Player (multiple OS/browser contexts); impact described as enabling DNS rebinding by remote attackers via unknown vectors. Remediation evidenced in connected advisories: Red Ha...

CVE-2017-11281

CVE-2017-11281 affects Adobe Flash Player before version 27.0.0.130 (impacting 26.0.0.151 and earlier). The vulnerability is a memory corruption issue in the text handling path that could allow remote code execution. Public exploit references exist (e.g., Exploit-DB entries) and various advisorie...

CVE-2010-2884

A memory corruption vulnerability exists in Adobe Flash Player , Adobe Reader , and Adobe Acrobat due to an error in how Flash files are parsed . This flaw allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. Affected versions include Flash Playe...

CVE-2010-3640

Technical details (affected products/components, exploit vectors, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-3104

An integer overflow vulnerability exists in several Adobe products, including Adobe Flash Player , Adobe AIR , Adobe AIR SDK , and Adobe AIR SDK & Compiler . The flaw allows attackers to execute arbitrary code via unspecified vectors. Affected versions include Flash Player before 13.0.0.292 and 1...

CVE-2015-7663

CVE-2015-7663 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.261 and 19.x prior to 19.0.0.245 on Windows/OS X, and prior to 11.2.202.548 on Linux; and Adobe AIR before 19.0.0.241 (and related SDK/Compiler). It allows attackers to execute arbitrary code via unspecif...

CVE-2015-8418

CVE-2015-8418 affects Adobe Flash Player (Windows/macOS: before 18.0.0.268 and 19.x; before 20.0.0.228 for 20.x on Windows/macOS; Linux: before 11.2.202.554) and Adobe AIR (before 20.0.0.204, including AIR SDK before 20.0.0.204) with memory corruption allowing arbitrary code execution or a denial...

CVE-2015-8648

CVE-2015-8648 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components. It affects Flash Player on Windows/OS X/Linux (pre-18.0.0.324, 19.x, and pre-20.0.0.267 on Windows/OS X; pre-11.2.202.559 on Linux) and Adobe AIR/AIR SDK before 20.0.0.233. The description note...

CVE-2016-1097

CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...

CVE-2016-7862

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-7862) in versions up to 23.0.0.205–23.0.0.207 and 11.2.202.643–11.2.202.644 that could lead to arbitrary code execution. Exploitation involves SWF handling and is confirmed by multiple advisories; updated builds address the issu...

CVE-2010-3646

Technical details about CVE-2010-3646 are not publicly available in the provided connected documents; monitor for updates.

CVE-2012-0724

CVE-2012-0724 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome prior to 18.0.1025.151. The vulnerability enables memory corruption leading to a possible denial of service or other unspecified impact via unknown vectors (distinct from CVE-2012-0725). Connected advisories corrobora...

CVE-2015-3100

Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-2997

CVE-2017-2997 is an Adobe Flash Player vulnerability (≤ 24.0.0.221) describing a stack/heap buffer overflow in Primetime TVSDK that could allow arbitrary code execution. Multiple connected advisories confirm the issue affects Flash Player components and remote exploitation is possible via crafted...

CVE-2010-3641

Technical details about CVE-2010-3641 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected products, root cause, or remediation are disclosed here.

CVE-2010-3642

Technical details about CVE-2010-3642 are not provided in the attached documents; no affected product/version or exploit information is disclosed. Monitor for updates from official advisories.

CVE-2010-3648

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2014-0498

Adobe Flash Player, Adobe AIR, and Adobe AIR SDK are affected by a stack-based buffer overflow vulnerability. This flaw allows an attacker to execute arbitrary code via unspecified vectors. Vulnerable versions include Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0....

CVE-2014-0569

An integer overflow in Adobe Flash Player , Adobe AIR , and Adobe AIR SDK (including Adobe AIR SDK & Compiler ) allows a remote attacker to execute arbitrary code via unspecified vectors. The vulnerability is specifically linked to an overflow in the casi32 method, which occurs when a ByteArray o...

CVE-2015-0348

CVE-2015-0348 is a documented buffer overflow in Adobe Flash Player that could allow remote code execution via unspecified vectors. The initial description specifies affected versions: Windows/macOS before 13.0.0.281 and 14.x through 17.x before 17.0.0.169, and Linux before 11.2.202.457. Connecte...

CVE-2016-1100

Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.

CVE-2016-4137

CVE-2016-4137 is a memory corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used within the Adobe Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The vulnerability can lead to remote code execution and is confirmed to have an exploit in the wild (Exploit-DB ent...

CVE-2017-2986

CVE-2017-2986 affects Adobe Flash Player, specifically the Flash Video (FLV) codec. The vulnerability is an exploitable heap overflow in the FLV codec for Flash Player versions 24.0.0.194 and earlier, which could allow arbitrary code execution. Evidence from multiple advisories confirms affected ...

CVE-2019-7837

Summary: CVE-2019-7837 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. The issue affects multiple Flash runtimes prior to version 32.0.0.192 (as reflected in Red Hat RHSA-2019:1234 and related advisories). Affected products/components: Adobe Flas...

CVE-2010-2182

Technical details for CVE-2010-2182 are not publicly available in the provided documents. The initial entry lists affected products/versions but no exposed root cause, impact specifics, or remediation in the supplied materials. Monitor for updates.

CVE-2015-3097

CVE-2015-3097 is an information-disclosure issue in Adobe Flash embedded in Chrome (and other Flash runtimes) where the random Flash heap address was not chosen securely, enabling an attacker to predict the address. The Mac OS X Nessus entry for Google Chrome

CVE-2015-3128

CVE-2015-3128 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: affected builds include before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: before 11.2.202.481) and in Adobe AIR/ AIR SDK/ SDK & Compiler before 18.0.0.180. The issue allows remote code execution via...

CVE-2017-2992

CVE-2017-2992 is a heap-based buffer overflow vulnerability in Adobe Flash Player triggered while parsing an MP4 header. It affects versions up to 24.0.0.194 (and earlier) per the CVE entry, with multiple advisories confirming a fix in 24.0.0.221 or later. The issue could allow arbitrary code exe...

CVE-2017-3074

Adobe Flash Player 25.0.0.148 and earlier is affected by a memory corruption vulnerability in the Graphics class (CVE-2017-3074). Successful exploitation could lead to arbitrary code execution. Public advisories indicate remediation via upgrading to at least 25.0.0.171 (and related CVEs 3068–3074...

CVE-2018-5001

CVE-2018-5001 describes an out-of-bounds read in Adobe Flash Player prior to version 30.0.0.113, leading to information disclosure. Connected advisories (Arch Linux ASA-201806-7, FreeBSD VUXML 2DDE5A56, CVE listings) confirm the vulnerability affects Flash Player before 30.0.0.113 and is mitigate...

CVE-2005-4708

The CVE-2005-4708 entry concerns Adobe Macromedia MX 2004 products, Captivate, Contribute 2/3, and the eLicensing client. The vulnerability arises from the Macromedia Licensing Service being installed with the Users group allowed to configure the service, including the path to the executable. Thi...

CVE-2010-2160

Technical details about CVE-2010-2160 are not publicly available in the provided Connected documents. Monitor for updates in case additional specifics (affected product/version, root cause, impact, or fixes) are published.

CVE-2015-0349

Technical details for CVE-2015-0349 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are documented here. Monitor for updates in connected sources.

CVE-2015-5567

CVE-2015-5567 describes a stack memory corruption vulnerability in Adobe Flash Player and Adobe AIR that could allow remote code execution or a denial of service. Affected software and versions (as stated): Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X; Flash on Linux ...

CVE-2016-4229

CVE-2016-4229 is a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux: before 11.2.202.632) enabling arbitrary code execution via unspecified vectors. The vulnerability is distinct from CVE-2016-4173/4174/4222/4226/4227/4228/4230/4231/424...

CVE-2018-15978

CVE-2018-15978 affects Adobe Flash Player versions 31.0.0.122 and earlier, with an out-of-bounds read that could lead to information disclosure. Public references in the connected documents indicate this vulnerability is addressed by updates (e.g., Flash Player 31.0.0.148 in the Mageia/RHEL advis...

CVE-2010-2179

CVE-2010-2179 is a documented XSS in Adobe Flash Player (and related Flash/AIR components) triggered when Firefox/Chrome access certain URLs. Connected advisories (RHSA-2010-0470 and RHSA-2010-0464) describe a flash-plugin security update addressing this and related CVEs, noting an input sanitiza...

CVE-2014-0552

The CVE-2014-0552 entry corresponds to a Flash Player/Air memory corruption vulnerability exploitable via crafted SWF content. Affected products include Adobe Flash Player before 13.0.0.244 and 14.x/15.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux, along with Adobe AIR...

CVE-2014-0556

A heap-based buffer overflow exists in Adobe Flash Player , Adobe AIR , and Adobe AIR SDK due to an integer overflow in the copyPixelsToByteArray method of the BitmapData object. This vulnerability affects Flash Player versions before 13.0.0.244, 14.x, and 15.0.0.152 on Windows and OS X, as well ...

CVE-2015-0331

Technical details for CVE-2015-0331 are not publicly available in the provided documents. Monitor for updates; the only explicit description is a use-after-free in Flash Player with unspecified vectors.

CVE-2015-7651

CVE-2015-7651 involves a use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X, and before 11.2.202.548 on Linux; Adobe AIR before 19.0.0.241 and AIR SDK/Compiler before 19.0.0.241. The root cause is use-after-free via crafted DefineFuncti...

CVE-2015-8650

Technical details (affected product/version, root cause, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2016-1021

Technical details about CVE-2016-1021 are not publicly provided in the connected documents; monitor for updates.

CVE-2016-4280

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2018-12824

CVE-2018-12824 affects Adobe Flash Player (and the flash-plugin in distributions) prior to version 30.0.0.154. The root cause is an out-of-bounds read that can lead to information disclosure. Public advisories (APSB18-25) document multiple vulnerabilities in Flash Player 30.x and provide a securi...

CVE-2009-0519

CVE-2009-0519 is a vulnerability in Adobe Flash Player 9.x (before 9.0.159.0) and Flash Player 10.x (before 10.0.22.87) that could be triggered by a crafted Shockwave Flash (.swf) file, potentially causing a browser crash or remote code execution. The issue is described across multiple advisories...

CVE-2010-3645

Adobe Flash Player is affected by CVE-2010-3645, with an unspecified vulnerability that allows remote code execution or memory corruption causing a denial of service. Affected products are Flash Player prior to 9.0.289.0 and 10.x prior to 10.1.102.64 across Windows, macOS, Linux, Solaris, and And...