CVE-2016-6986

CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...

CVE-2017-11215

CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...

CVE-2017-11282

Adobe Flash Player contains a memory corruption vulnerability (CVE-2017-11282) in the MP4 atom parser that could allow remote arbitrary code execution. Affected versions are 26.0.0.151 and earlier. Multiple connected advisories confirm the issue and note that a fix exists in version 27.0.0.130 or...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...

CVE-2017-3072

Adobe Flash Player vulnerability CVE-2017-3072 is described as an exploitable memory corruption in the BitmapData class in Flash Player 25.0.0.148 and earlier, with successful exploitation potentially leading to arbitrary code execution. The connected advisories corroborate multiple related CVEs ...

CVE-2018-5007

CVE-2018-5007 is a Type Confusion vulnerability in Adobe Flash Player up to version 30.0.0.113 (and earlier). Exploitation could allow arbitrary code execution in the context of the current user, with network access as the attack vector and no user interaction required (per CVSSv3: HIGH, CVSSv2: ...

CVE-2009-0520

CVE-2009-0520 affects Adobe Flash Player 9.x prior to 9.0.159.0 and 10.x prior to 10.0.22.87. The issue arises when Flash processing SWF content fails to properly remove references to destroyed objects, enabling remote code execution via a crafted SWF file (buffer overflow-related). Public adviso...

CVE-2010-3649

Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.

CVE-2012-0751

CVE-2012-0751 concerns Adobe Flash Player ActiveX on Windows. The vulnerability exists in Flash Player versions before 10.3.183.15 and 11.x before 11.1.102.62 and can lead to arbitrary code execution or memory corruption via unspecified vectors. Mitigation provided by updating Flash Player to 11....

CVE-2015-3100

Adobe Flash Player and related components are affected by a stack-based buffer overflow (CVE-2015-3100) that enables arbitrary code execution. Affected product/version range includes Flash Player prior to 13.0.0.292 and 14.x through 18.x prior to 18.0.0.160 on Windows/macOS, and prior to 11.2.202...

CVE-2015-3105

CVE-2015-3105 affects Adobe Flash Player and related AIR/SDK components. The vulnerability enables arbitrary code execution or memory-corruption-induced DoS via unspecified vectors in Flash Player and AIR across Windows, macOS, Linux, and Android, with affected versions listed in the initial desc...

CVE-2015-8062

Technical details about CVE-2015-8062 are not publicly available in the provided documents. No affected product specifics, exploit information, or remediation are confirmed here. Monitor for updates.

CVE-2015-8064

Technical details about CVE-2015-8064 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, versions, impact, or remediation are disclosed in the connected EUVD entries.

CVE-2015-8071

CVE-2015-8071 is a use-after-free vulnerability affecting Adobe Flash Player and related AIR components. Affected products include Flash Player on Windows/OS X (before 18.0.0.268; 19.x and 20.x before 20.0.0.228) and on Linux (before 11.2.202.554), as well as Adobe AIR before 20.0.0.204 and Adobe...

CVE-2015-8650

Technical details (affected product/version, root cause, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4149

CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...

CVE-2016-4175

Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.

CVE-2016-4248

Technical details about CVE-2016-4248 are not publicly available in the provided documents. The connected EUVD entries describe malware-related items, but do not include product, impact, vectors, or remediation specifics for this CVE. Monitor for updates.

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-7859

Adobe Flash Player versions 23.0.0.205 and earlier, and 11.2.202.643 and earlier, contain a use-after-free vulnerability that could allow remote arbitrary code execution. The issue affects Flash Player across major platforms and was addressed in updated builds: 23.0.0.207 (Flash Player 23.x) and ...

CVE-2017-2934

CVE-2017-2934 : Adobe Flash Player versions up to 24.0.0.186 contain an exploitable heap overflow in the JPEG/Adobe Texture Format parsing path. Successful exploitation could lead to arbitrary code execution on the affected host. Exploit evidence exists (Exploit-DB entry 41611; Arch/ Gentoo advis...

CVE-2017-3002

CVE-2017-3002 is an Adobe Flash Player vulnerability describing a use-after-free in the ActionScript2 TextField object. Affected: Flash Player 24.0.0.221 and earlier. Impact and exploitation: could allow arbitrary code execution on a remote host. Public advisories note multiple patches; upgrades ...

CVE-2018-15983

CVE-2018-15983 affects Adobe Flash Player up to 31.0.0.153 (and 31.0.0.108 and earlier). The issue is insecure library loading (DLL hijacking) that could allow privilege escalation. Affected product: Flash Player on multiple platforms; root cause is DLL loading without proper verification in the ...

CVE-2010-3641

Technical details about CVE-2010-3641 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected products, root cause, or remediation are disclosed here.

CVE-2011-2416

Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...

CVE-2015-0339

Adobe Flash Player vulnerability CVE-2015-0339 is a memory corruption flaw in Flash Player triggered by parsing a specially crafted SWF file. Affects Windows and OS X builds: Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134, and Linux before 11.2.202.451. Exploitation can lead...

CVE-2015-0357

CVE-2015-0357 is an Adobe Flash Player memory-discovery flaw that bypasses ASLR by improperly restricting memory address access. Affected are Windows/macOS: 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause: insecure handling of memory addresses enabling ASLR bypa...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

CVE-2015-3118

CVE-2015-3118 is a use-after-free vulnerability affecting Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 (including AIR SDK before/Compiler before 18.0.0.180). The issue per...

CVE-2015-7662

CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...

CVE-2015-8444

The CVE-2015-8444 entry covers vulnerabilities in Adobe Flash Player and Adobe AIR family where: affected products include Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Com...

CVE-2015-8655

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2015-8655 are not provided in the supplied documents; no exploit specifics or patch information are present. Monitor for updates.

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2016-4152

CVE-2016-4152 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier used in Flash libraries for Internet Explorer 10/11 and Edge. Connected sources (HackerOne) map this to a ShimContentResolver.configure memory corruption issue in Flash Player, with patches issued by variou...

CVE-2016-4284

Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...

CVE-2010-3640

Technical details (affected products/components, exploit vectors, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2010-3642

Technical details about CVE-2010-3642 are not provided in the attached documents; no affected product/version or exploit information is disclosed. Monitor for updates from official advisories.

CVE-2014-0539

CVE-2014-0539 is a security-bypass vulnerability affecting Adobe Flash Player and Adobe AIR (and related SDK components). The issue, described together with CVE-2014-0537, stems from insufficient security restrictions when handling specially crafted SWF content, enabling bypass of intended access...

CVE-2015-0318

CVE-2015-0318 is a memory corruption vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux. It affects Flash Player versions prior to 13.0.0.269 and 14.x up to 16.x prior to 16.0.0.305 (Windows/OS X) and prior to 11.2.202.442 (Linux) and can lead to arbitrary code execution or de...

CVE-2015-0356

Adobe Flash Player contains a type confusion vulnerability (CVE-2015-0356) that could allow arbitrary code execution. Affected versions are Windows and macOS: before 13.0.0.281 and 14.x through 17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause is a type confusion handling certain SWF...

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

CVE-2017-3000

CVE-2017-3000 affects Adobe Flash Player

CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

CVE-2017-3112

Summary: CVE-2017-3112 (and related CVEs) affect Adobe Flash Player up to 27.0.0.183 and earlier, with out-of-bounds reads in the AdobePSDK metadata and out-of-bounds/use-after-free conditions described as causing remote code execution or data exposure. Multiple connected advisories confirm these...

CVE-2018-4945

Adobe Flash Player CVE-2018-4945 is a Type Confusion vulnerability affecting Flash Player up to version 29.0.0.171. The vulnerability could allow arbitrary code execution in the context of the current user when a crafted Flash file is processed. Public advisories and vendor patches confirm that u...

CVE-2010-3643

Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.

CVE-2011-2425

Technical details for CVE-2011-2425 are not publicly provided in the supplied documents. Please monitor the connected sources for updates.

CVE-2014-0531

CVE-2014-0531 is an XSS vulnerability in Adobe Flash Player (and related AIR components) that could allow a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Affected: Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X; Flash Player before ...