CVE-2016-4238

CVE-2016-4238 affects Adobe Flash Player: Windows/macOS versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209, and Linux before 11.2.202.632. Root cause/vectors are described as unspecified. Impact includes arbitrary code execution or memory-corruption-based DoS. No remediation details provi...

CVE-2016-7865

CVE-2016-7865 affects Adobe Flash Player: type confusion in Flash components. Public advisories link it to Flash Player 11.2.202.644 (and earlier 11.x) and also to the 23.0.0.207 line, with exploitation capable of arbitrary code execution. Connected documents confirm this CVE as part of multiple ...

CVE-2017-2990

CVE-2017-2990 is an Adobe Flash Player memory corruption vulnerability in the h264 decompression routine affecting version 24.0.0.194 and earlier; exploitation could lead to arbitrary code execution. Remediation is to upgrade to 24.0.0.221 (or later) per advisories from Arch Linux and other sourc...

CVE-2009-0114

CVE-2009-0114 is an Adobe Flash Player vulnerability affecting Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 (and possibly other versions). The issue is described as an unspecified vulnerability in the Settings Manager that could allow a remote attacker to trick a user into visitin...

CVE-2010-0186

CVE-2010-0186 is a cross-domain sandbox bypass vulnerability affecting Adobe Flash Player (before 10.0.45.2), Adobe AIR (before 1.5.3.9130), and Adobe Reader/Acrobat (8.x before 8.2.1 and 9.x before 9.3.1). The issue allows remote attackers to make cross-domain requests via unspecified vectors, w...

CVE-2010-2162

CVE-2010-2162 affects Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. The vulnerability arises from improper length calculations in the STSC, STSZ, and STCO atoms, enabling heap memory corruption that could crash the process or allow ...

CVE-2011-2135

Technical details for CVE-2011-2135 are not publicly available in the provided documents; the connected EUVD entries mention malware but do not specify this CVE's affected products or fixes. Monitor for updates.

CVE-2011-2137

CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....

CVE-2014-0545

Technical details for CVE-2014-0545 are not publicly available in the provided documents. The connected EUVD entries mention malware and generic memory-leakage contexts without product/version/impact specifics. Monitor for updates.

CVE-2014-0576

CVE-2014-0576 is a memory‑corruption vulnerability in Adobe Flash Player triggered by parsing a specially crafted SWF file, potentially allowing remote arbitrary code execution. Affected products/versions include Flash Player on Windows, OS X, and Linux (per the description), plus related AIR com...

CVE-2015-0307

The CVE-2015-0307 entry concerns Adobe Flash Player (Windows, OS X, Linux) and related Flash components (Air/SDK). Connected advisory CPAI-2015-0073 states this is an Out-of-Bounds Memory Read/Memory Corruption issue that could allow a remote attacker to obtain sensitive information from the proc...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-3118

CVE-2015-3118 is a use-after-free vulnerability affecting Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR before 18.0.0.180 (including AIR SDK before/Compiler before 18.0.0.180). The issue per...

CVE-2015-5561

CVE-2015-5561 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components that potentially allows remote code execution. Affected products and versions (per the description) include: Flash Player before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux;...

CVE-2015-8655

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2015-8655 are not provided in the supplied documents; no exploit specifics or patch information are present. Monitor for updates.

CVE-2016-0969

Technical details about CVE-2016-0969 are not provided in the connected documents. Monitoring for updates is advised; no explicit affected products, versions, or fixes are stated in the supplied EUVD entries.

CVE-2016-0980

Technical details about CVE-2016-0980 are not publicly provided in the supplied documents; the EUVD entries mention malware but do not describe affected software, root cause, or fixes. Monitor for updates.

CVE-2016-4226

CVE-2016-4226 is a use-after-free vulnerability in Adobe Flash Player that affects Windows/OS X and Linux builds prior to the patched versions listed in the entry: before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows/OS X, and before 11.2.202.632 on Linux. The issue allows arbitra...

CVE-2016-4248

Technical details about CVE-2016-4248 are not publicly available in the provided documents. The connected EUVD entries describe malware-related items, but do not include product, impact, vectors, or remediation specifics for this CVE. Monitor for updates.

CVE-2016-4276

Technical details for CVE-2016-4276 are not publicly available in the provided documents. Monitor for updates when connected sources (if any) publish specifics about affected products, vectors, impact, or remediation.

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...

CVE-2017-3085

Adobe Flash Player vulnerability CVE-2017-3085 is an information-disclosure bypass triggered by URL redirects in Flash versions up to 26.0.0.137 (and fixed in 26.0.0.151). Public advisories and vendor pages reference the affected range and confirm an upgrade path to 26.0.0.151 as the remediation....

CVE-2018-15983

CVE-2018-15983 affects Adobe Flash Player up to 31.0.0.153 (and 31.0.0.108 and earlier). The issue is insecure library loading (DLL hijacking) that could allow privilege escalation. Affected product: Flash Player on multiple platforms; root cause is DLL loading without proper verification in the ...

CVE-2018-4919

CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...

CVE-2006-5330

The CVE-2006-5330 issue affects Adobe Flash Player plugins prior to 7.0.69 (and earlier variants) across Windows, Linux, Solaris, and macOS, causing remote attackers to modify HTTP headers and perform HTTP Request Splitting via CRLF in arguments to ActionScript functions (XML.addRequestHeader, XM...

CVE-2012-0751

CVE-2012-0751 concerns Adobe Flash Player ActiveX on Windows. The vulnerability exists in Flash Player versions before 10.3.183.15 and 11.x before 11.1.102.62 and can lead to arbitrary code execution or memory corruption via unspecified vectors. Mitigation provided by updating Flash Player to 11....

CVE-2014-0491

CVE-2014-0491 affects Adobe Flash Player (Windows/Mac/Linux) and Adobe AIR/SDK/Compiler. The vulnerability allows bypassing protection mechanisms via unknown vectors, leading to potential complete compromise of affected systems. The initial description notes unknown vectors and does not specify t...

CVE-2015-7632

CVE-2015-7632 is a buffer overflow in Adobe Flash Player and Adobe AIR that allows remote code execution via a Loader object with a crafted loaderBytes property. Affected products include Adobe Flash Player versions prior to 18.0.0.252 and 19.x prior to 19.0.0.207 on Windows/macOS, and prior to 1...

CVE-2016-4152

CVE-2016-4152 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier used in Flash libraries for Internet Explorer 10/11 and Edge. Connected sources (HackerOne) map this to a ShimContentResolver.configure memory corruption issue in Flash Player, with patches issued by variou...

CVE-2016-4187

Technical details about CVE-2016-4187 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation information.

CVE-2017-3003

CVE-2017-3003 is a use-after-free vulnerability in Adobe Flash Player

CVE-2017-3112

Summary: CVE-2017-3112 (and related CVEs) affect Adobe Flash Player up to 27.0.0.183 and earlier, with out-of-bounds reads in the AdobePSDK metadata and out-of-bounds/use-after-free conditions described as causing remote code execution or data exposure. Multiple connected advisories confirm these...

CVE-2019-7108

Adobe Flash Player versions 32.0.0.156 and earlier are affected by an out-of-bounds read vulnerability (CVE-2019-7108) that could lead to information disclosure. Multiple connected advisories confirm the issue in Flash Player and list upgrade as the remediation: upgrade to 32.0.0.171 or newer (e....

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2015-5116

CVE-2015-5116 affects Adobe Flash Player and related AIR components. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors, impacting Windows/OS X Flash Player versions prior to 13.0.0.302 and 14.x through 18.x prior to 18.0.0.203, and Linux Flash Play...

CVE-2015-8065

CVE-2015-8065 is a use-after-free vulnerability in Adobe Flash Player (before 18.0.0.268 and 19.x; before 20.0.0.228 on Windows/OS X; before 11.2.202.554 on Linux) and Adobe AIR (before 20.0.0.204) that permits arbitrary code execution via unspecified vectors. Affected products/versions are liste...

CVE-2016-0960

CVE-2016-0960 affects Adobe Flash Player prior to 18.0.0.333 and 19.x up to 21.x before 21.0.0.182 on Windows/macOS, and prior to 11.2.202.577 on Linux, plus Adobe AIR before 21.0.0.176 (and AIR SDK/Compiler before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause...

CVE-2016-0961

Technical details for CVE-2016-0961 are not publicly available in the provided documents. Monitor for updates and further disclosures.

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2016-4135

CVE-2016-4135 is one of multiple Flash Player vulnerabilities addressed in mid‑2016 advisories. Connected sources show this entry being treated as a memory corruption issue in Adobe Flash Player (Flash libraries in IE/Edge) that contributes to heap-based buffers overflow and arbitrary code execut...

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-7858

CVE-2016-7858 is a use-after-free vulnerability in Adobe Flash Player that could allow remote arbitrary code execution. Affected products include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier (Windows/other platforms), with exploitation possible via processing a crafted SWF fil...

CVE-2017-2936

Adobe Flash Player versions 24.0.0.186 and earlier are affected by a use-after-free vulnerability in the ActionScript FileReference class (CVE-2017-2936). Successful exploitation could lead to arbitrary code execution on affected systems. Remediation provided in multiple advisories: upgrade to Fl...

CVE-2017-2994

CVE-2017-2994 affects Adobe Flash Player prior to 24.0.0.221, involving a use-after-free in the Primetime SDK event dispatch that could lead to arbitrary code execution . The vulnerability is described as remote in multiple advisories and vendor bulletins, with impact stated as the ability for a ...

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2018-4945

Adobe Flash Player CVE-2018-4945 is a Type Confusion vulnerability affecting Flash Player up to version 29.0.0.171. The vulnerability could allow arbitrary code execution in the context of the current user when a crafted Flash file is processed. Public advisories and vendor patches confirm that u...

CVE-2018-5007

CVE-2018-5007 is a Type Confusion vulnerability in Adobe Flash Player up to version 30.0.0.113 (and earlier). Exploitation could allow arbitrary code execution in the context of the current user, with network access as the attack vector and no user interaction required (per CVSSv3: HIGH, CVSSv2: ...

CVE-2011-2134

CVE-2011-2134 is a buffer overflow in Adobe Flash Player (Windows/macOS/Linux/Solaris) and Adobe AIR that could allow arbitrary code execution via unspecified vectors. Affected products are Flash Player prior to 10.3.183.5 (and prior to 10.3.186.3 on Android) and AIR prior to 2.7.1.1961. Remediat...

CVE-2013-0504

CVE-2013-0504 is a buffer overflow in Adobe Flash Player’s broker service that allows arbitrary code execution. Affected versions include Windows and Mac OS X builds prior to 10.3.183.67, and 11.x prior to 11.6.602.171 for Windows/Mac; and Linux builds prior to 11.2.202.273. Connected advisories ...