CVE-2010-3639

Adobe Flash Player (flash-plugin) contains multiple vulnerabilities tracked as CVE-2010-3639 and related 2010-36xx series. Public advisories (RHSA-2010-0829/0834/0867) indicate that updates fixed these flaws by upgrading Flash Player to version 10.1.102.64 (and earlier 9.0.289.0 in some releases)...

CVE-2011-2425

Technical details for CVE-2011-2425 are not publicly provided in the supplied documents. Please monitor the connected sources for updates.

CVE-2014-0499

CVE-2014-0499 affects Adobe Flash Player (Windows, Mac OS X) and Adobe AIR/SDK components. The root cause is that these components do not prevent access to address information, aiding bypass of ASLR via unspecified vectors. Affected Flash Player versions include pre-11.7.700.269 and 11.8.x up to ...

CVE-2014-0534

CVE-2014-0534 is a vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components where attackers could bypass intended access restrictions via crafted SWF/vector exploits. The patched line is tied to APSB14-16; affected versions include Flash Player prior to 13.0.0.223 and...

CVE-2014-0574

CVE-2014-0574 is a double-free vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution via unspecified vectors. Public disclosures tie the issue to the Flash update APSB14-24; patches/updates were released (e.g., Flash Player 11.2.202.418 for some p...

CVE-2015-0307

The CVE-2015-0307 entry concerns Adobe Flash Player (Windows, OS X, Linux) and related Flash components (Air/SDK). Connected advisory CPAI-2015-0073 states this is an Out-of-Bounds Memory Read/Memory Corruption issue that could allow a remote attacker to obtain sensitive information from the proc...

CVE-2015-3090

CVE-2015-3090 affects Adobe Flash Player prior to 13.0.0.289 and 14.x–17.x prior to 17.0.0.188 on Windows/macOS, and prior to 11.2.202.460 on Linux, plus Adobe AIR/SDK before 17.0.0.172. Connected sources indicate a shader operation-based memory corruption (ShaderJob) vulnerability that can enabl...

CVE-2015-8044

Technical details about CVE-2015-8044 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-8055

Technical details for CVE-2015-8055 are not publicly available in the provided documents. Connected EUVD entries mention malware context but do not specify affected products, root causes, or fixes. Monitor for updates.

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-4135

CVE-2016-4135 is one of multiple Flash Player vulnerabilities addressed in mid‑2016 advisories. Connected sources show this entry being treated as a memory corruption issue in Adobe Flash Player (Flash libraries in IE/Edge) that contributes to heap-based buffers overflow and arbitrary code execut...

CVE-2016-4150

CVE-2016-4150 is an unspecified memory corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, reported in the Flash libraries used by IE/Edge. Connected sources confirm a ShimContentFactory.retrieveOpportunityGenerators() memory-corruption condition leading to potential memory cra...

CVE-2016-4153

CVE-2016-4153 is a memory‑corruption vulnerability in Adobe Flash Player’s ShimOpportunityGenerator.configure() that can cause a memory crash and, as described by a trusted report, could enable arbitrary code execution. The vulnerability is associated with Flash Player builds up to 21.0.0.242 and...

CVE-2016-4156

CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...

CVE-2016-4230

CVE-2016-4230 describes a use-after-free in Adobe Flash Player affecting Windows, OS X, and Linux across multiple version ranges (before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X; before 11.2.202.632 on Linux). The vulnerability allows arbitrary code execution via unspecified vec...

CVE-2016-4274

Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.

CVE-2016-4285

Technical details for CVE-2016-4285 (affected software, components, exploit vectors, impact) are not publicly provided in the connected documents; monitor official advisories for updates.

CVE-2016-6930

Technical details about CVE-2016-6930 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2008-4820

CVE-2008-4820 affects the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows, enabling information disclosure via unknown vectors. Connected sources indicate this issue was not fully resolved by a prior fix and that CVE-2009-3951 notes the vulnerability exists bec...

CVE-2008-5361

Adobe Flash Player and Adobe AIR are affected by CVE-2008-5361. The vulnerability arises because the ActionScript 2 VM does not verify a member element’s size when performing DefineConstantPool, ActionJump, ActionPush, and ActionTry (and related actions), enabling a remote attacker to read sensit...

CVE-2010-2187

Technical details for CVE-2010-2187 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-3648

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2010-3652

Technical details for CVE-2010-3652 are not publicly available in the provided documents. Connected EUVD entries mention malware labels but do not specify affected products, root cause, or remediation. Monitor for updates and additional disclosures.

CVE-2013-0643

CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows remote code execution via crafted SWF content. Affected products include Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183....

CVE-2013-1367

Technical details about CVE-2013-1367 are not publicly available in the provided connected documents. Monitor for updates from ENISA EUVD entries and other sources.

CVE-2014-0508

CVE-2014-0508 affects Adobe Flash Player prior to 11.7.700.275 and 11.8.x prior to 13.0.0.182 on Windows/macOS, and prior to 11.2.202.350 on Linux; Adobe AIR prior to 13.0.0.83 (Android) and AIR SDK/SDK & Compiler prior to 13.0.0.83. The issue is described as bypassing intended access restriction...

CVE-2015-5580

CVE-2015-5580 corresponds to a memory corruption vulnerability in Adobe Flash Player and related AIR components, reported as APSB15-23. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X, and before 11.2.202.521 on Linux, plus Adobe AIR before 19.0...

CVE-2015-7657

Technical details for CVE-2015-7657 are not publicly available in the provided documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2015-8417

Technical details about CVE-2015-8417 are not publicly available in the provided Connected documents; monitor for updates. The initial description lists affected Flash/AIR versions and general impact, but no concrete root-cause, exploit vectors, or fixes are disclosed here.

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-4125

CVE-2016-4125 is listed as an Adobe Flash Player vulnerability addressed by the 11.2.202.626 update (APSB16-18) across multiple Linux distributions (SUSE/openSUSE) and Red Hat advisories. The connected documents confirm the CVE is part of a batch of issues fixed in the Flash Player update and lin...

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4279

Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2016-6927

Technical details for CVE-2016-6927 are not publicly available in the provided documents. Connected EUVD entries mention malware but do not describe the vulnerability. Monitor for updates.

CVE-2016-6929

Technical details about CVE-2016-6929 are not provided in the connected documents. The EUVD entries mention malware but do not specify affected products, impact, or remediation. Monitor for updates.

CVE-2016-7862

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-7862) in versions up to 23.0.0.205–23.0.0.207 and 11.2.202.643–11.2.202.644 that could lead to arbitrary code execution. Exploitation involves SWF handling and is confirmed by multiple advisories; updated builds address the issu...

CVE-2017-2938

Adobe Flash Player 24.x vulnerable: CVE-2017-2938 is a security bypass in the handling of TCP connections affecting Flash Player versions up to 24.0.0.186. Remediation per connected documents is upgrading to the patched build (24.0.0.194 or later) as part of APSB17-02/openSUSE update openSUSE-201...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2017-3099

Adobe Flash Player

CVE-2017-3106

Adobe Flash Player

CVE-2017-3112

Summary: CVE-2017-3112 (and related CVEs) affect Adobe Flash Player up to 27.0.0.183 and earlier, with out-of-bounds reads in the AdobePSDK metadata and out-of-bounds/use-after-free conditions described as causing remote code execution or data exposure. Multiple connected advisories confirm these...

CVE-2018-4944

CVE-2018-4944 affects Adobe Flash Player: a type-confusion vulnerability in versions 29.0.0.140 and earlier that could allow arbitrary code execution in the current user context. Public advisories reference APSB18-16; mitigation is to upgrade to a non‑vulnerable version (e.g., 29.0.0.171 or newer...

CVE-2010-0187

CVE-2010-0187 affects Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130, allowing remote attackers to cause an application crash (DoS) via a modified SWF file. Connected advisories indicate updates to Flash Player (e.g., upgrade to 10.0.45.2) mitigate the issue (RHSA-2010-0102; ...

CVE-2010-2166

Technical details for CVE-2010-2166 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-3643

Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.

CVE-2010-3644

CVE-2010-3644 concerns an unspecified vulnerability in Adobe Flash Player prior to 9.0.289.0 and in the 10.x branch prior to 10.1.102.64 (Windows, macOS, Linux, Solaris) and 10.1.95.1 on Android. The flaw can allow execution of arbitrary code or a denial of service due to memory corruption, via u...