CVE-2013-0637

Adobe Flash Player and AIR contain a vulnerability (CVE-2013-0637) that could allow a remote attacker to obtain sensitive information via unspecified vectors. Affected affected software/versions include Flash Player on Windows (before 10.3.183.63) and Windows 11.x before 11.6.602.168, Mac OS X (b...

CVE-2014-8440

CVE-2014-8440 is a memory‑corruption vulnerability in Adobe Flash Player’s ByteArray::UncompressViaZlibVariant that can lead to arbitrary code execution or crash via uninitialized memory. Affected products/versions (per initial description): Flash Player before 13.0.0.252 and 14.x and 15.x before...

CVE-2015-0351

CVE-2015-0351 is an Adobe Flash Player use-after-free vulnerability that could allow remote code execution. Publicly available sources note it affects Flash Player prior to 13.0.0.281 and 14.x through 17.x prior to 17.0.0.169 on Windows/macOS, and prior to 11.2.202.457 on Linux, with the attack v...

CVE-2015-3085

CVE-2015-3085 is a remote-write-bypass vulnerability in Adobe Flash Player and related AIR components. Affects Flash Player before 13.0.0.289 and 14.x up to 17.x before 17.0.0.188 (Windows/macOS) and before 11.2.202.460 (Linux), as well as Adobe AIR before 17.0.0.172, and AIR SDKs before 17.0.0.1...

CVE-2016-4187

Technical details about CVE-2016-4187 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2016-4272

Technical details for CVE-2016-4272 are not publicly provided in the supplied documents. No vendor, product, version, impact, or remediation specifics are included here. Monitor for updates from official advisories and security feeds.

CVE-2016-7865

CVE-2016-7865 affects Adobe Flash Player: type confusion in Flash components. Public advisories link it to Flash Player 11.2.202.644 (and earlier 11.x) and also to the 23.0.0.207 line, with exploitation capable of arbitrary code execution. Connected documents confirm this CVE as part of multiple ...

CVE-2017-2927

CVE-2017-2927 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable heap overflow when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution. The issue is confirmed in multiple advisories; a fix is available upstream in Fla...

CVE-2017-2937

CVE-2017-2937 affects Adobe Flash Player before 24.0.0.194/24.0.0.186 and earlier. A use-after-free in the ActionScript FileReference class (when using class inheritance) can be exploited to execute arbitrary code remotely. The issue is confirmed in multiple advisories; mitigation documented as u...

CVE-2018-15978

CVE-2018-15978 affects Adobe Flash Player versions 31.0.0.122 and earlier, with an out-of-bounds read that could lead to information disclosure. Public references in the connected documents indicate this vulnerability is addressed by updates (e.g., Flash Player 31.0.0.148 in the Mageia/RHEL advis...

CVE-2011-2417

Technical details for CVE-2011-2417 are not publicly available in the provided documents. Monitor for updates; no concrete affected products, root cause, or remediation information is present in the connected sources.

CVE-2014-0576

CVE-2014-0576 is a memory‑corruption vulnerability in Adobe Flash Player triggered by parsing a specially crafted SWF file, potentially allowing remote arbitrary code execution. Affected products/versions include Flash Player on Windows, OS X, and Linux (per the description), plus related AIR com...

CVE-2015-0358

Technical details about CVE-2015-0358 are not provided in the connected documents. The initial description mentions use-after-free in Flash Player versions but lacks concrete product/version/root-cause/remediation details. Monitor for updates.

CVE-2015-3115

Technical details for CVE-2015-3115 are not provided in the connected documents; no specifics on affected products, impact, or fixes. Monitor for updates.

CVE-2015-3134

Technical details about CVE-2015-3134 (affected products, vulnerable components, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5580

CVE-2015-5580 corresponds to a memory corruption vulnerability in Adobe Flash Player and related AIR components, reported as APSB15-23. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0...

CVE-2015-5582

Summary: CVE-2015-5582 affects Adobe Flash Player and Adobe AIR components. A memory corruption vulnerability in Flash Player allows remote code execution or denial of service via parsing crafted media (SWF/MP4) payloads, with exploitable conditions indicated by related advisories. Affected produ...

CVE-2015-7651

CVE-2015-7651 involves a use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X, and before 11.2.202.548 on Linux; Adobe AIR before 19.0.0.241 and AIR SDK/Compiler before 19.0.0.241. The root cause is use-after-free via crafted DefineFuncti...

CVE-2015-8417

Technical details about CVE-2015-8417 are not publicly available in the provided Connected documents; monitor for updates. The initial description lists affected Flash/AIR versions and general impact, but no concrete root-cause, exploit vectors, or fixes are disclosed here.

CVE-2015-8424

Technical details for CVE-2015-8424 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-4150

CVE-2016-4150 is an unspecified memory corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, reported in the Flash libraries used by IE/Edge. Connected sources confirm a ShimContentFactory.retrieveOpportunityGenerators() memory-corruption condition leading to potential memory cra...

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-3003

CVE-2017-3003 is a use-after-free vulnerability in Adobe Flash Player

CVE-2010-0186

CVE-2010-0186 is a cross-domain sandbox bypass vulnerability affecting Adobe Flash Player (before 10.0.45.2), Adobe AIR (before 1.5.3.9130), and Adobe Reader/Acrobat (8.x before 8.2.1 and 9.x before 9.3.1). The issue allows remote attackers to make cross-domain requests via unspecified vectors, w...

CVE-2014-0491

CVE-2014-0491 affects Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR/SDK/Compiler. The vulnerability allows bypassing protection mechanisms via unknown vectors, leading to potential complete compromise of affected systems. The initial description notes unknown vectors and does not specify t...

CVE-2014-0552

The CVE-2014-0552 entry corresponds to a Flash Player/Air memory corruption vulnerability exploitable via crafted SWF content. Affected products include Adobe Flash Player before 13.0.0.244 and 14.x/15.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux, along with Adobe AIR...

CVE-2015-0330

CVE-2015-0330 corresponds to a memory-corruption/remote code execution issue in Adobe Flash Player. The connected Exploit-DB entry (36420) details an Adobe Flash Player PCRE Regex vulnerability that allows arbitrary code execution via the PCRE engine when handling a specific escape sequence with ...

CVE-2015-5127

CVE-2015-5127 describes a use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.232 (Windows/macOS) and prior to 11.2.202.508 (Linux), as well as in Adobe AIR prior to 18.0.0.199 (and related SDKs). It allows attackers to execute arbitrary code via unspecified vectors. The Initial do...

CVE-2015-5567

CVE-2015-5567 describes a stack memory corruption vulnerability in Adobe Flash Player and Adobe AIR that could allow remote code execution or a denial of service. Affected software and versions (as stated): Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X; Flash on Linux ...

CVE-2015-8414

Technical details for CVE-2015-8414 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-1096

Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.

CVE-2016-1109

CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...

CVE-2016-4226

CVE-2016-4226 is a use-after-free vulnerability in Adobe Flash Player that affects Windows/OS X and Linux builds prior to the patched versions listed in the entry: before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux. The issue allows arbitra...

CVE-2017-2925

CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...

CVE-2017-2936

Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2018-4871

CVE-2018-4871 affects Adobe Flash Player prior to 28.0.0.137, due to an out-of-bounds read caused by computing with an invalid pointer offset that reads past a buffer. This can lead to information exposure. Affected product: Adobe Flash Player (Windows, macOS, Linux, Chrome OS). Patch/mitigation:...

CVE-2010-2160

Technical details about CVE-2010-2160 are not publicly available in the provided Connected documents. Monitor for updates in case additional specifics (affected product/version, root cause, impact, or fixes) are published.

CVE-2011-2135

Technical details for CVE-2011-2135 are not publicly available in the provided documents; the connected EUVD entries mention malware but do not specify this CVE's affected products or fixes. Monitor for updates.

CVE-2014-0492

CVE-2014-0492 affects Adobe Flash Player and Adobe AIR components. The issue stems from an “address leak” that defeats ASLR, impacting Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows/Mac, and prior to 11.2.202.335 on Linux, as well as Adobe AIR before 4.0.0.13...

CVE-2014-0545

Technical details for CVE-2014-0545 are not publicly available in the provided documents. The connected EUVD entries mention malware and generic memory-leakage contexts without product/version/impact specifics. Monitor for updates.

CVE-2015-3040

CVE-2015-3040 affects Adobe Flash Player. A memory address discovery bypass vulnerability allows bypassing ASLR on Windows, OS X, and Linux. Affected versions: Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Windows/OS X); before 11.2.202.457 (Linux). Root cause: improper ...

CVE-2015-3103

CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...

CVE-2015-5578

The provided documents confirm CVE-2015-5578 affects Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR before 19.0.0.190 (and AIR SDK/Compiler before 19.0.0.190). The connected advisories indicate the root cause...

CVE-2015-7632

CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...

CVE-2016-0960

CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2016-6986

CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...

CVE-2017-11215

CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...