1084 matches found
CVE-2015-3128
CVE-2015-3128 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: affected builds include before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203; Linux: before 11.2.202.481) and in Adobe AIR/ AIR SDK/ SDK & Compiler before 18.0.0.180. The issue allows remote code execution via...
CVE-2015-8648
CVE-2015-8648 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components. It affects Flash Player on Windows/OS X/Linux (pre-18.0.0.324, 19.x, and pre-20.0.0.267 on Windows/OS X; pre-11.2.202.559 on Linux) and Adobe AIR/AIR SDK before 20.0.0.233. The description note...
CVE-2016-0998
CVE-2016-0998 is a use-after-free vulnerability in Adobe Flash Player (and related AIR components) that allows arbitrary code execution via unspecified vectors on Windows, OS X, and Linux, affecting Flash Player prior to 18.0.0.333 and 19.x–21.x before 21.0.0.182, and AIR before 21.0.0.176. The r...
CVE-2012-0724
CVE-2012-0724 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome prior to 18.0.1025.151. The vulnerability enables memory corruption leading to a possible denial of service or other unspecified impact via unknown vectors (distinct from CVE-2012-0725). Connected advisories corrobora...
CVE-2016-4229
CVE-2016-4229 is a use-after-free in Adobe Flash Player (Windows/macOS: before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux: before 11.2.202.632) enabling arbitrary code execution via unspecified vectors. The vulnerability is distinct from CVE-2016-4173/4174/4222/4226/4227/4228/4230/4231/424...
CVE-2017-2930
CVE-2017-2930 affects Adobe Flash Player versions 24.0.0.186 and earlier. The vulnerability is a memory corruption caused by a concurrency error while manipulating a display list, and is able to lead to arbitrary code execution on a remote host. Exploitation was demonstrated in advisories and exp...
CVE-2017-2986
CVE-2017-2986 affects Adobe Flash Player, specifically the Flash Video (FLV) codec. The vulnerability is an exploitable heap overflow in the FLV codec for Flash Player versions 24.0.0.194 and earlier, which could allow arbitrary code execution. Evidence from multiple advisories confirms affected ...
CVE-2010-2179
CVE-2010-2179 is a documented XSS in Adobe Flash Player (and related Flash/AIR components) triggered when Firefox/Chrome access certain URLs. Connected advisories (RHSA-2010-0470 and RHSA-2010-0464) describe a flash-plugin security update addressing this and related CVEs, noting an input sanitiza...
CVE-2010-3646
Technical details about CVE-2010-3646 are not publicly available in the provided connected documents; monitor for updates.
CVE-2015-3097
CVE-2015-3097 is an information-disclosure issue in Adobe Flash embedded in Chrome (and other Flash runtimes) where the random Flash heap address was not chosen securely, enabling an attacker to predict the address. The Mac OS X Nessus entry for Google Chrome
CVE-2015-8417
Technical details about CVE-2015-8417 are not publicly available in the provided Connected documents; monitor for updates. The initial description lists affected Flash/AIR versions and general impact, but no concrete root-cause, exploit vectors, or fixes are disclosed here.
CVE-2016-4280
Technical details are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2017-2992
CVE-2017-2992 is a heap-based buffer overflow vulnerability in Adobe Flash Player triggered while parsing an MP4 header. It affects versions up to 24.0.0.194 (and earlier) per the CVE entry, with multiple advisories confirming a fix in 24.0.0.221 or later. The issue could allow arbitrary code exe...
CVE-2010-2884
CVE-2010-2884 affects Adobe Flash Player 10.1.82.76 and earlier (Windows, macOS, Linux, Solaris) and 10.1.92.10 on Android, plus authplay.dll in Adobe Reader/Acrobat 9.x (before 9.4) and 8.x (before 8.2.5). The vulnerability enables remote code execution or memory corruption via unspecified vecto...
CVE-2014-0556
CVE-2014-0556 is an Adobe Flash Player/ AIR heap overflow triggered by an integer overflow in copyPixelsToByteArray, caused when a ByteArray’s position is set very large. Exploits publicly describe a heap grooming chain that corrupts a Vector. length to achieve arbitrary read/write and ultimately...
CVE-2014-0569
CVE-2014-0569 is an integer overflow vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution. Affected products/versions (per initial entry) include Flash Player before 13.0.0.250 and 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 o...
CVE-2015-0331
Technical details for CVE-2015-0331 are not publicly available in the provided documents. Monitor for updates; the only explicit description is a use-after-free in Flash Player with unspecified vectors.
CVE-2015-0349
Technical details for CVE-2015-0349 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are documented here. Monitor for updates in connected sources.
CVE-2015-7655
Technical details about CVE-2015-7655 are not publicly provided in the connected documents. The EUVD entries mention malware context, but no concrete product versions, root cause, impact, or remediation are detailed here; monitor for updates.
CVE-2016-1021
Technical details about CVE-2016-1021 are not publicly provided in the connected documents; monitor for updates.
CVE-2016-4273
CVE-2016-4273 affects Adobe Flash Player prior to 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows/macOS, and before 11.2.202.637 on Linux. The issue is a memory corruption vulnerability exploitable via unspecified vectors, linked to a separate group of CVEs (2016-6982…6990). The con...
CVE-2017-3073
CVE-2017-3073 affects Adobe Flash Player 25.0.0.148 and earlier, with an exploitable use-after-free vulnerability when handling multiple mask properties of display objects, leading to memory corruption and potential arbitrary code execution. Multiple connected advisories confirm the affected comp...
CVE-2010-2182
Technical details for CVE-2010-2182 are not publicly available in the provided documents. The initial entry lists affected products/versions but no exposed root cause, impact specifics, or remediation in the supplied materials. Monitor for updates.
CVE-2013-5329
CVE-2013-5329 is a memory-corruption vulnerability in multiple Flash Player versions (Windows/macOS: prior to 11.9.900.152; Linux: prior to 11.2.202.327) and in related AIR components (AIR before 3.9.0.1210). Exploitation could lead to arbitrary code execution or a crash. The publicly referenced ...
CVE-2016-7862
Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-7862) in versions up to 23.0.0.205–23.0.0.207 and 11.2.202.643–11.2.202.644 that could lead to arbitrary code execution. Exploitation involves SWF handling and is confirmed by multiple advisories; updated builds address the issu...
CVE-2017-11225
CVE-2017-11225 is an Adobe Flash Player use-after-free vulnerability in the Primetime SDK metadata code path (affecting Flash Player 27.0.0.183 and earlier). The issue can cause memory corruption or control-flow/information leak and could lead to arbitrary code execution on successful exploitatio...
CVE-2017-2932
CVE-2017-2932 affects Adobe Flash Player versions 24.0.0.186 and earlier, with a use-after-free vulnerability in the ActionScript MovieClip class that could lead to arbitrary code execution. Several advisories summarize the issue (e.g., ASA-201701-16/17) and the Arch Linux entry lists it among mu...
CVE-2017-3074
Adobe Flash Player 25.0.0.148 and earlier is affected by a memory corruption vulnerability in the Graphics class (CVE-2017-3074). Successful exploitation could lead to arbitrary code execution. Public advisories indicate remediation via upgrading to at least 25.0.0.171 (and related CVEs 3068–3074...
CVE-2019-7837
Summary: CVE-2019-7837 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. The issue affects multiple Flash runtimes prior to version 32.0.0.192 (as reflected in Red Hat RHSA-2019:1234 and related advisories). Affected products/components: Adobe Flas...
CVE-2005-4708
The CVE-2005-4708 entry concerns Adobe Macromedia MX 2004 products, Captivate, Contribute 2/3, and the eLicensing client. The vulnerability arises from the Macromedia Licensing Service being installed with the Users group allowed to configure the service, including the path to the executable. Thi...
CVE-2010-2171
Technical details for CVE-2010-2171 are not publicly available in the provided documents. Monitor for updates.
CVE-2010-3636
CVE-2010-3636 affects Adobe Flash Player prior to 9.0.289.0 and prior to 10.1.102.64 (for 10.x), across Windows, macOS, Linux, Solaris, and Android. The flaw arises from how Flash parses cross-domain policy files with unspecified encodings, allowing remote web servers to bypass intended access re...
CVE-2014-0516
CVE-2014-0516 refers to a Same Origin Policy bypass in Adobe Flash Player and AIR SDK components. Publicly affected versions include Windows/macOS Flash Player prior to 13.0.0.214 and Linux prior to 11.2.202.359, as well as AIR SDK prior to 13.0.0.111 and AIR SDK & Compiler prior to 13.0.0.111. T...
CVE-2015-0348
CVE-2015-0348 is a documented buffer overflow in Adobe Flash Player that could allow remote code execution via unspecified vectors. The initial description specifies affected versions: Windows/macOS before 13.0.0.281 and 14.x through 17.x before 17.0.0.169, and Linux before 11.2.202.457. Connecte...
CVE-2015-3104
CVE-2015-3104 is an integer overflow in Adobe Flash Player (Windows, macOS, Linux) and related Adobe AIR/SDK components. The flaw allows arbitrary code execution via unspecified vectors and affects Flash Player versions prior to 13.0.0.292, 14.x up to 18.x before 18.0.0.160 (Windows/macOS) and pr...
CVE-2016-1097
CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...
CVE-2016-4137
CVE-2016-4137 is a memory corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used within the Adobe Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The vulnerability can lead to remote code execution and is confirmed to have an exploit in the wild (Exploit-DB ent...
CVE-2016-6926
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2016-7857
Adobe Flash Player 23.0.0.205 and earlier, and 11.2.202.643 and earlier contain a use-after-free vulnerability that could allow remote arbitrary code execution when handling SWF content. The issue (CVE-2016-7857) is addressed in updates to Flash Player 23.x and 11.x lines (e.g., 23.0.0.207 and 11...
CVE-2017-3070
Adobe Flash Player 25.0.0.148 and earlier is affected by CVE-2017-3070 due to a memory corruption flaw in the ConvolutionFilter class, which could allow arbitrary code execution if exploited. Affected software versions include 25.0.0.148 and earlier; remediation across vendors is to upgrade to 25...
CVE-2018-12824
CVE-2018-12824 affects Adobe Flash Player (and the flash-plugin in distributions) prior to version 30.0.0.154. The root cause is an out-of-bounds read that can lead to information disclosure. Public advisories (APSB18-25) document multiple vulnerabilities in Flash Player 30.x and provide a securi...
CVE-2019-7108
Adobe Flash Player versions 32.0.0.156 and earlier are affected by an out-of-bounds read vulnerability (CVE-2019-7108) that could lead to information disclosure. Multiple connected advisories confirm the issue in Flash Player and list upgrade as the remediation: upgrade to 32.0.0.171 or newer (e....
CVE-2006-5330
The CVE-2006-5330 issue affects Adobe Flash Player plugins prior to 7.0.69 (and earlier variants) across Windows, Linux, Solaris, and macOS, causing remote attackers to modify HTTP headers and perform HTTP Request Splitting via CRLF in arguments to ActionScript functions (XML.addRequestHeader, XM...
CVE-2014-8440
CVE-2014-8440 is a memory‑corruption vulnerability in Adobe Flash Player’s ByteArray::UncompressViaZlibVariant that can lead to arbitrary code execution or crash via uninitialized memory. Affected products/versions (per initial description): Flash Player before 13.0.0.252 and 14.x and 15.x before...
CVE-2015-0351
CVE-2015-0351 is an Adobe Flash Player use-after-free vulnerability that could allow remote code execution. Publicly available sources note it affects Flash Player prior to 13.0.0.281 and 14.x through 17.x prior to 17.0.0.169 on Windows/macOS, and prior to 11.2.202.457 on Linux, with the attack v...
CVE-2015-3134
Technical details about CVE-2015-3134 (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2015-5580
CVE-2015-5580 corresponds to a memory corruption vulnerability in Adobe Flash Player and related AIR components, reported as APSB15-23. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0...
CVE-2015-8061
Technical details (affected products, versions, root cause, fixes) are not provided in the connected documents for CVE-2015-8061; monitor for updates.
CVE-2016-4238
CVE-2016-4238 affects Adobe Flash Player: Windows/macOS versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209, and Linux before 11.2.202.632. Root cause/vectors are described as unspecified. Impact includes arbitrary code execution or memory-corruption-based DoS. No remediation details provi...