CVE-2015-7632

CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...

CVE-2015-8064

Technical details about CVE-2015-8064 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, versions, impact, or remediation are disclosed in the connected EUVD entries.

CVE-2016-0960

CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2016-1096

Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-6986

CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...

CVE-2017-11215

CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...

CVE-2017-11282

Adobe Flash Player contains a memory corruption vulnerability (CVE-2017-11282) in the MP4 atom parser that could allow remote arbitrary code execution. Affected versions are 26.0.0.151 and earlier. Multiple connected advisories confirm the issue and note that a fix exists in version 27.0.0.130 or...

CVE-2017-3002

CVE-2017-3002 is an Adobe Flash Player vulnerability describing a use-after-free in the ActionScript2 TextField object. Affected: Flash Player 24.0.0.221 and earlier. Impact and exploitation: could allow arbitrary code execution on a remote host. Public advisories note multiple patches; upgrades ...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...

CVE-2010-2160

Technical details about CVE-2010-2160 are not publicly available in the provided Connected documents. Monitor for updates in case additional specifics (affected product/version, root cause, impact, or fixes) are published.

CVE-2011-2135

Technical details for CVE-2011-2135 are not publicly available in the provided documents; the connected EUVD entries mention malware but do not specify this CVE's affected products or fixes. Monitor for updates.

CVE-2014-0545

Technical details for CVE-2014-0545 are not publicly available in the provided documents. The connected EUVD entries mention malware and generic memory-leakage contexts without product/version/impact specifics. Monitor for updates.

CVE-2015-0357

CVE-2015-0357 is an Adobe Flash Player memory-discovery flaw that bypasses ASLR by improperly restricting memory address access. Affected are Windows/macOS: 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause: insecure handling of memory addresses enabling ASLR bypa...

CVE-2015-3105

CVE-2015-3105 affects Adobe Flash Player and related AIR/SDK components. The vulnerability enables arbitrary code execution or memory-corruption-induced DoS via unspecified vectors in Flash Player and AIR across Windows, macOS, Linux, and Android, with affected versions listed in the initial desc...

CVE-2015-8062

Technical details about CVE-2015-8062 are not publicly available in the provided documents. No affected product specifics, exploit information, or remediation are confirmed here. Monitor for updates.

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2016-4152

CVE-2016-4152 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier used in Flash libraries for Internet Explorer 10/11 and Edge. Connected sources (HackerOne) map this to a ShimContentResolver.configure memory corruption issue in Flash Player, with patches issued by variou...

CVE-2016-4175

Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.

CVE-2009-0520

CVE-2009-0520 affects Adobe Flash Player 9.x prior to 9.0.159.0 and 10.x prior to 10.0.22.87. The issue arises when Flash processing SWF content fails to properly remove references to destroyed objects, enabling remote code execution via a crafted SWF file (buffer overflow-related). Public adviso...

CVE-2014-0531

CVE-2014-0531 is an XSS vulnerability in Adobe Flash Player (and related AIR components) that could allow a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Affected: Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X; Flash Player before ...

CVE-2015-0318

CVE-2015-0318 is a memory corruption vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux. It affects Flash Player versions prior to 13.0.0.269 and 14.x up to 16.x prior to 16.0.0.305 (Windows/OS X) and prior to 11.2.202.442 (Linux) and can lead to arbitrary code execution or de...

CVE-2015-0339

Adobe Flash Player vulnerability CVE-2015-0339 is a memory corruption flaw in Flash Player triggered by parsing a specially crafted SWF file. Affects Windows and OS X builds: Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134, and Linux before 11.2.202.451. Exploitation can lead...

CVE-2015-0356

Adobe Flash Player contains a type confusion vulnerability (CVE-2015-0356) that could allow arbitrary code execution. Affected versions are Windows and macOS: before 13.0.0.281 and 14.x through 17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause is a type confusion handling certain SWF...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

CVE-2015-3118

CVE-2015-3118 is a use-after-free vulnerability affecting Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 (including AIR SDK before/Compiler before 18.0.0.180). The issue per...

CVE-2015-8444

The CVE-2015-8444 entry covers vulnerabilities in Adobe Flash Player and Adobe AIR family where: affected products include Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Com...

CVE-2015-8650

Technical details (affected product/version, root cause, exploit info) are not publicly available in the provided documents. Monitor for updates.

CVE-2015-8655

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2015-8655 are not provided in the supplied documents; no exploit specifics or patch information are present. Monitor for updates.

CVE-2016-0970

The CVE-2016-0970 entry concerns multiple Adobe products: Flash Player prior to 18.0.0.329 (and 19.x prior to 20.0.0.306 on Windows/OS X; prior to 11.2.202.569 on Linux) and Adobe AIR prior to 20.0.0.260 (including AIR SDK before 20.0.0.260 and AIR SDK & Compiler before 20.0.0.260). It describes ...

CVE-2016-4149

CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

CVE-2017-2934

CVE-2017-2934 : Adobe Flash Player versions up to 24.0.0.186 contain an exploitable heap overflow in the JPEG/Adobe Texture Format parsing path. Successful exploitation could lead to arbitrary code execution on the affected host. Exploit evidence exists (Exploit-DB entry 41611; Arch/ Gentoo advis...

CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

CVE-2017-3112

Summary: CVE-2017-3112 (and related CVEs) affect Adobe Flash Player up to 27.0.0.183 and earlier, with out-of-bounds reads in the AdobePSDK metadata and out-of-bounds/use-after-free conditions described as causing remote code execution or data exposure. Multiple connected advisories confirm these...

CVE-2018-15983

CVE-2018-15983 affects Adobe Flash Player up to 31.0.0.153 (and 31.0.0.108 and earlier). The issue is insecure library loading (DLL hijacking) that could allow privilege escalation. Affected product: Flash Player on multiple platforms; root cause is DLL loading without proper verification in the ...

CVE-2010-3641

Technical details about CVE-2010-3641 are not publicly available in the provided documents. Monitor for updates from official advisories; no specific affected products, root cause, or remediation are disclosed here.

CVE-2010-3642

Technical details about CVE-2010-3642 are not provided in the attached documents; no affected product/version or exploit information is disclosed. Monitor for updates from official advisories.

CVE-2010-3649

Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.

CVE-2011-2416

Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...

CVE-2011-2427

Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...

CVE-2015-0307

The CVE-2015-0307 entry concerns Adobe Flash Player (Windows, OS X, Linux) and related Flash components (Air/SDK). Connected advisory CPAI-2015-0073 states this is an Out-of-Bounds Memory Read/Memory Corruption issue that could allow a remote attacker to obtain sensitive information from the proc...

CVE-2015-5545

Technical details for CVE-2015-5545 are not publicly provided in the connected documents. Monitor for updates to affected products, impact, and remediation.

CVE-2015-7662

CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...

CVE-2015-8065

CVE-2015-8065 is a use-after-free vulnerability in Adobe Flash Player (before 18.0.0.268 and 19.x; before 20.0.0.228 on Windows/OS X; before 11.2.202.554 on Linux) and Adobe AIR (before 20.0.0.204) that permits arbitrary code execution via unspecified vectors. Affected products/versions are liste...

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-0980

Technical details about CVE-2016-0980 are not publicly provided in the supplied documents; the EUVD entries mention malware but do not describe affected software, root cause, or fixes. Monitor for updates.

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...