1084 matches found
CVE-2015-7632
CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...
CVE-2015-8414
Technical details for CVE-2015-8414 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2016-0960
CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...
CVE-2016-1096
Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.
CVE-2016-1109
CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...
CVE-2016-4272
Technical details for CVE-2016-4272 are not publicly provided in the supplied documents. No vendor, product, version, impact, or remediation specifics are included here. Monitor for updates from official advisories and security feeds.
CVE-2017-11225
CVE-2017-11225 is an Adobe Flash Player use-after-free vulnerability in the Primetime SDK metadata code path (affecting Flash Player 27.0.0.183 and earlier). The issue can cause memory corruption or control-flow/information leak and could lead to arbitrary code execution on successful exploitatio...
CVE-2017-2927
CVE-2017-2927 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable heap overflow when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. The issue is confirmed in multiple advisories; a fix is available upstream in Fla...
CVE-2017-2936
Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...
CVE-2017-3070
Adobe Flash Player 25.0.0.148 and earlier is affected by CVE-2017-3070 due to a memory corruption flaw in the ConvolutionFilter class, which could allow arbitrary code execution if exploited. Affected software versions include 25.0.0.148 and earlier; remediation across vendors is to upgrade to 25...
CVE-2017-3080
CVE-2017-3080 is a vulnerability in Adobe Flash Player (pre-26.0.0.137) that enables information disclosure and is tied to a security bypass in the Flash API used by Internet Explorer. Connected advisories and records confirm the issue affects Flash Player
CVE-2017-3085
Adobe Flash Player vulnerability CVE-2017-3085 is an information-disclosure bypass triggered by URL redirects in Flash versions up to 26.0.0.137 (and fixed in 26.0.0.151). Public advisories and vendor pages reference the affected range and confirm an upgrade path to 26.0.0.151 as the remediation....
CVE-2018-15978
CVE-2018-15978 affects Adobe Flash Player versions 31.0.0.122 and earlier, with an out-of-bounds read that could lead to information disclosure. Public references in the connected documents indicate this vulnerability is addressed by updates (e.g., Flash Player 31.0.0.148 in the Mageia/RHEL advis...
CVE-2009-0114
CVE-2009-0114 is an Adobe Flash Player vulnerability affecting Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 (and possibly other versions). The issue is described as an unspecified vulnerability in the Settings Manager that could allow a remote attacker to trick a user into visitin...
CVE-2009-0520
CVE-2009-0520 affects Adobe Flash Player 9.x prior to 9.0.159.0 and 10.x prior to 10.0.22.87. The issue arises when Flash processing SWF content fails to properly remove references to destroyed objects, enabling remote code execution via a crafted SWF file (buffer overflow-related). Public adviso...
CVE-2010-0186
CVE-2010-0186 is a cross-domain sandbox bypass vulnerability affecting Adobe Flash Player (before 10.0.45.2), Adobe AIR (before 1.5.3.9130), and Adobe Reader/Acrobat (8.x before 8.2.1 and 9.x before 9.3.1). The issue allows remote attackers to make cross-domain requests via unspecified vectors, w...
CVE-2014-0491
CVE-2014-0491 affects Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR/SDK/Compiler. The vulnerability allows bypassing protection mechanisms via unknown vectors, leading to potential complete compromise of affected systems. The initial description notes unknown vectors and does not specify t...
CVE-2014-0552
The CVE-2014-0552 entry corresponds to a Flash Player/Air memory corruption vulnerability exploitable via crafted SWF content. Affected products include Adobe Flash Player before 13.0.0.244 and 14.x/15.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux, along with Adobe AIR...
CVE-2015-0330
CVE-2015-0330 corresponds to a memory-corruption/remote code execution issue in Adobe Flash Player. The connected Exploit-DB entry (36420) details an Adobe Flash Player PCRE Regex vulnerability that allows arbitrary code execution via the PCRE engine when handling a specific escape sequence with ...
CVE-2015-3104
CVE-2015-3104 is an integer overflow in Adobe Flash Player (Windows, macOS, Linux) and related Adobe AIR/SDK components. The flaw allows arbitrary code execution via unspecified vectors and affects Flash Player versions prior to 13.0.0.292, 14.x up to 18.x before 18.0.0.160 (Windows/macOS) and pr...
CVE-2015-3115
Technical details for CVE-2015-3115 are not provided in the connected documents; no specifics on affected products, impact, or fixes. Monitor for updates.
CVE-2015-3134
Technical details about CVE-2015-3134 (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2015-5127
CVE-2015-5127 describes a use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), as well as in Adobe AIR prior to 18.0.0.199 (and related SDKs). It allows attackers to execute arbitrary code via unspecified vectors. The Initial do...
CVE-2015-8424
Technical details for CVE-2015-8424 are not publicly available in the provided connected documents; monitor for updates.
CVE-2016-1102
CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...
CVE-2016-4149
CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...
CVE-2016-4175
Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.
CVE-2016-7859
Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier, contain a use-after-free vulnerability that could allow remote arbitrary code execution. The issue affects Flash Player across major platforms and was addressed in updated builds: 23.0.0.207 (Flash Player 23.x) and ...
CVE-2017-11215
CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...
CVE-2017-3003
CVE-2017-3003 is a use-after-free vulnerability in Adobe Flash Player
CVE-2017-3069
Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...
CVE-2017-3072
Adobe Flash Player vulnerability CVE-2017-3072 is described as an exploitable memory corruption in the BitmapData class in Flash Player 25.0.0.148 and earlier, with successful exploitation potentially leading to arbitrary code execution. The connected advisories corroborate multiple related CVEs ...
CVE-2018-4871
CVE-2018-4871 affects Adobe Flash Player prior to 28.0.0.137, due to an out-of-bounds read caused by computing with an invalid pointer offset that reads past a buffer. This can lead to information exposure. Affected product: Adobe Flash Player (Windows, macOS, Linux, Chrome OS). Patch/mitigation:...
CVE-2010-2160
Technical details about CVE-2010-2160 are not publicly available in the provided Connected documents. Monitor for updates in case additional specifics (affected product/version, root cause, impact, or fixes) are published.
CVE-2011-2416
Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...
CVE-2015-0349
Technical details for CVE-2015-0349 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are documented here. Monitor for updates in connected sources.
CVE-2015-3039
CVE-2015-3039 is a use-after-free in Adobe Flash Player (AS2 conversion operator handling) that can lead to arbitrary code execution. Affected: Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux. Root cause: during native matrix ...
CVE-2015-3040
CVE-2015-3040 affects Adobe Flash Player. A memory address discovery bypass vulnerability allows bypassing ASLR on Windows, OS X, and Linux. Affected versions: Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Windows/OS X); before 11.2.202.457 (Linux). Root cause: improper ...
CVE-2015-3100
Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...
CVE-2015-3103
CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...
CVE-2015-5578
The provided documents confirm CVE-2015-5578 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190). The connected advisories indicate the root cause...
CVE-2015-7662
CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...
CVE-2015-8062
Technical details about CVE-2015-8062 are not publicly available in the provided documents. No affected product specifics, exploit information, or remediation are confirmed here. Monitor for updates.
CVE-2015-8064
Technical details about CVE-2015-8064 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, versions, impact, or remediation are disclosed in the connected EUVD entries.
CVE-2016-1021
Technical details about CVE-2016-1021 are not publicly provided in the connected documents; monitor for updates.
CVE-2017-2925
CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...
CVE-2010-3649
Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.
CVE-2014-0492
CVE-2014-0492 affects Adobe Flash Player and Adobe AIR components. The issue stems from an “address leak” that defeats ASLR, impacting Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows/Mac, and prior to 11.2.202.335 on Linux, as well as Adobe AIR before 4.0.0.13...
CVE-2015-3105
CVE-2015-3105 affects Adobe Flash Player and related AIR/SDK components. The vulnerability enables arbitrary code execution or memory-corruption-induced DoS via unspecified vectors in Flash Player and AIR across Windows, macOS, Linux, and Android, with affected versions listed in the initial desc...