CVE-2015-3039

CVE-2015-3039 is a use-after-free in Adobe Flash Player (AS2 conversion operator handling) that can lead to arbitrary code execution. Affected: Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux. Root cause: during native matrix ...

CVE-2015-7632

CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...

CVE-2015-8065

CVE-2015-8065 is a use-after-free vulnerability in Adobe Flash Player (before 18.0.0.268 and 19.x; before 20.0.0.228 on Windows/OS X; before 11.2.202.554 on Linux) and Adobe AIR (before 20.0.0.204) that permits arbitrary code execution via unspecified vectors. Affected products/versions are liste...

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2017-2936

Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...

CVE-2017-2982

CVE-2017-2982: Adobe Flash Player contains a use-after-free vulnerability in a shutdown routine affecting version 24.0.0.194 and earlier; exploitation could lead to arbitrary code execution. Remediation is to upgrade to 24.0.0.221 (and related patched builds) as indicated by multiple advisories (...

CVE-2018-5007

CVE-2018-5007 is a Type Confusion vulnerability in Adobe Flash Player up to version 30.0.0.113 (and earlier). Exploitation could allow arbitrary code execution in the context of the current user, with network access as the attack vector and no user interaction required (per CVSSv3: HIGH, CVSSv2: ...

CVE-2010-3640

Technical details (affected products/components, exploit vectors, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2011-2135

Technical details for CVE-2011-2135 are not publicly available in the provided documents; the connected EUVD entries mention malware but do not specify this CVE's affected products or fixes. Monitor for updates.

CVE-2014-0491

CVE-2014-0491 affects Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR/SDK/Compiler. The vulnerability allows bypassing protection mechanisms via unknown vectors, leading to potential complete compromise of affected systems. The initial description notes unknown vectors and does not specify t...

CVE-2014-0492

CVE-2014-0492 affects Adobe Flash Player and Adobe AIR components. The issue stems from an “address leak” that defeats ASLR, impacting Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows/Mac, and prior to 11.2.202.335 on Linux, as well as Adobe AIR before 4.0.0.13...

CVE-2014-0545

Technical details for CVE-2014-0545 are not publicly available in the provided documents. The connected EUVD entries mention malware and generic memory-leakage contexts without product/version/impact specifics. Monitor for updates.

CVE-2015-0339

Adobe Flash Player vulnerability CVE-2015-0339 is a memory corruption flaw in Flash Player triggered by parsing a specially crafted SWF file. Affects Windows and OS X builds: Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134, and Linux before 11.2.202.451. Exploitation can lead...

CVE-2015-0357

CVE-2015-0357 is an Adobe Flash Player memory-discovery flaw that bypasses ASLR by improperly restricting memory address access. Affected are Windows/macOS: 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause: insecure handling of memory addresses enabling ASLR bypa...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

CVE-2015-7662

CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...

CVE-2015-8650

Technical details (affected product/version, root cause, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8655

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2015-8655 are not provided in the supplied documents; no exploit specifics or patch information are present. Monitor for updates.

CVE-2016-0970

The CVE-2016-0970 entry concerns multiple Adobe products: Flash Player prior to 18.0.0.329 (and 19.x prior to 20.0.0.306 on Windows/OS X; prior to 11.2.202.569 on Linux) and Adobe AIR prior to 20.0.0.260 (including AIR SDK before 20.0.0.260 and AIR SDK & Compiler before 20.0.0.260). It describes ...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2016-4152

CVE-2016-4152 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier used in Flash libraries for Internet Explorer 10/11 and Edge. Connected sources (HackerOne) map this to a ShimContentResolver.configure memory corruption issue in Flash Player, with patches issued by variou...

CVE-2016-4175

Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.

CVE-2017-11282

Adobe Flash Player contains a memory corruption vulnerability (CVE-2017-11282) in the MP4 atom parser that could allow remote arbitrary code execution. Affected versions are 26.0.0.151 and earlier. Multiple connected advisories confirm the issue and note that a fix exists in version 27.0.0.130 or...

CVE-2017-2925

CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...

CVE-2017-3072

Adobe Flash Player vulnerability CVE-2017-3072 is described as an exploitable memory corruption in the BitmapData class in Flash Player 25.0.0.148 and earlier, with successful exploitation potentially leading to arbitrary code execution. The connected advisories corroborate multiple related CVEs ...

CVE-2018-15983

CVE-2018-15983 affects Adobe Flash Player up to 31.0.0.153 (and 31.0.0.108 and earlier). The issue is insecure library loading (DLL hijacking) that could allow privilege escalation. Affected product: Flash Player on multiple platforms; root cause is DLL loading without proper verification in the ...

CVE-2010-2160

Technical details about CVE-2010-2160 are not publicly available in the provided Connected documents. Monitor for updates in case additional specifics (affected product/version, root cause, impact, or fixes) are published.

CVE-2010-3641

Technical details about CVE-2010-3641 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected products, root cause, or remediation are disclosed here.

CVE-2015-0307

The CVE-2015-0307 entry concerns Adobe Flash Player (Windows, OS X, Linux) and related Flash components (Air/SDK). Connected advisory CPAI-2015-0073 states this is an Out-of-Bounds Memory Read/Memory Corruption issue that could allow a remote attacker to obtain sensitive information from the proc...

CVE-2015-8444

The CVE-2015-8444 entry covers vulnerabilities in Adobe Flash Player and Adobe AIR family where: affected products include Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Com...

CVE-2016-0961

Technical details for CVE-2016-0961 are not publicly available in the provided documents. Monitor for updates and further disclosures.

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2017-11215

CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...

CVE-2017-2934

CVE-2017-2934 : Adobe Flash Player versions up to 24.0.0.186 contain an exploitable heap overflow in the JPEG/Adobe Texture Format parsing path. Successful exploitation could lead to arbitrary code execution on the affected host. Exploit evidence exists (Exploit-DB entry 41611; Arch/ Gentoo advis...

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2010-3649

Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.

CVE-2011-2416

Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...

CVE-2011-2427

Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...

CVE-2012-0751

CVE-2012-0751 concerns Adobe Flash Player ActiveX on Windows. The vulnerability exists in Flash Player versions before 10.3.183.15 and 11.x before 11.1.102.62 and can lead to arbitrary code execution or memory corruption via unspecified vectors. Mitigation provided by updating Flash Player to 11....

CVE-2015-0356

Adobe Flash Player contains a type confusion vulnerability (CVE-2015-0356) that could allow arbitrary code execution. Affected versions are Windows and macOS: before 13.0.0.281 and 14.x through 17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause is a type confusion handling certain SWF...

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2016-4149

CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...

CVE-2016-4230

CVE-2016-4230 describes a use-after-free in Adobe Flash Player affecting Windows, OS X, and Linux across multiple version ranges (before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X; before 11.2.202.632 on Linux). The vulnerability allows arbitrary code execution via unspecified vec...

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-4284

Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...

CVE-2016-6986

CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...

CVE-2017-2935

CVE-2017-2935 affects Adobe Flash Player 24.0.0.186 and earlier. Root cause: a heap overflow when processing the Flash Video container file format, leading to arbitrary code execution. Documents indicate an exploit exists (Exploit-DB link) and multiple advisories/patches recommend upgrading to ve...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2017-3002

CVE-2017-3002 is an Adobe Flash Player vulnerability describing a use-after-free in the ActionScript2 TextField object. Affected: Flash Player 24.0.0.221 and earlier. Impact and exploitation: could allow arbitrary code execution on a remote host. Public advisories note multiple patches; upgrades ...