CVE-2014-0539

CVE-2014-0539 is a security-bypass vulnerability affecting Adobe Flash Player and Adobe AIR (and related SDK components). The issue, described together with CVE-2014-0537, stems from insufficient security restrictions when handling specially crafted SWF content, enabling bypass of intended access...

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-5545

Technical details for CVE-2015-5545 are not publicly provided in the connected documents. Monitor for updates to affected products, impact, and remediation.

CVE-2015-7657

Technical details for CVE-2015-7657 are not publicly available in the provided documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2015-7662

CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...

CVE-2015-8652

Technical details for CVE-2015-8652 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2016-0961

Technical details for CVE-2016-0961 are not publicly available in the provided documents. Monitor for updates and further disclosures.

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-0980

Technical details about CVE-2016-0980 are not publicly provided in the supplied documents; the EUVD entries mention malware but do not describe affected software, root cause, or fixes. Monitor for updates.

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...

CVE-2016-4222

CVE-2016-4222 is a use-after-free vulnerability in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected: Windows and macOS Flash Player versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Impact: potential remote code executi...

CVE-2016-4284

Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...

CVE-2016-6992

Adobe Flash Player vulnerability CVE-2016-6992 is a type confusion flaw that could allow remote code execution. Affected products include Flash Player on Windows, macOS (before 18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). Connected advisories indicate fixes were re...

CVE-2016-7867

CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2017-3000

CVE-2017-3000 affects Adobe Flash Player

CVE-2017-3106

Adobe Flash Player

CVE-2018-4944

CVE-2018-4944 affects Adobe Flash Player: a type-confusion vulnerability in versions 29.0.0.140 and earlier that could allow arbitrary code execution in the current user context. Public advisories reference APSB18-16; mitigation is to upgrade to a non‑vulnerable version (e.g., 29.0.0.171 or newer...

CVE-2018-4945

Adobe Flash Player CVE-2018-4945 is a Type Confusion vulnerability affecting Flash Player up to version 29.0.0.171. The vulnerability could allow arbitrary code execution in the context of the current user when a crafted Flash file is processed. Public advisories and vendor patches confirm that u...

CVE-2008-4820

CVE-2008-4820 affects the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows, enabling information disclosure via unknown vectors. Connected sources indicate this issue was not fully resolved by a prior fix and that CVE-2009-3951 notes the vulnerability exists bec...

CVE-2009-3794

CVE-2009-3794 describes a heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 triggered by crafted JPEG data in SWF files, enabling remote code execution. Connected advisories (e.g., RHSA-2009:1657/1658) indicate Red Hat patching Flash-Plugin with upgrade...

CVE-2010-3640

Technical details (affected products/components, exploit vectors, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2010-3652

Technical details for CVE-2010-3652 are not publicly available in the provided documents. Connected EUVD entries mention malware labels but do not specify affected products, root cause, or remediation. Monitor for updates and additional disclosures.

CVE-2011-2425

Technical details for CVE-2011-2425 are not publicly provided in the supplied documents. Please monitor the connected sources for updates.

CVE-2014-0506

Technical details about CVE-2014-0506 are not publicly provided in the supplied documents. The sources reference the vulnerability but do not include specifics on impact, affected products beyond Flash Player/AIR, or remediation. Monitor for updates.

CVE-2014-0534

CVE-2014-0534 is a vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components where attackers could bypass intended access restrictions via crafted SWF/vector exploits. The patched line is tied to APSB14-16; affected versions include Flash Player prior to 13.0.0.223 and...

CVE-2015-3090

CVE-2015-3090 affects Adobe Flash Player prior to 13.0.0.289 and 14.x–17.x prior to 17.0.0.188 on Windows/macOS, and prior to 11.2.202.460 on Linux, plus Adobe AIR/SDK before 17.0.0.172. Connected sources indicate a shader operation-based memory corruption (ShaderJob) vulnerability that can enabl...

CVE-2015-8055

Technical details for CVE-2015-8055 are not publicly available in the provided documents. Connected EUVD entries mention malware context but do not specify affected products, root causes, or fixes. Monitor for updates.

CVE-2016-1006

Adobe Flash Player vulnerability CVE-2016-1006 allows bypass of ASLR via JIT data. Affected products and versions (from the provided sources) include Windows and OS X Flash Player versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213, and Linux Flash Player before 11.2.202.616. The roo...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-4285

Technical details for CVE-2016-4285 (affected software, components, exploit vectors, impact) are not publicly provided in the connected documents; monitor official advisories for updates.

CVE-2016-6985

Adobe Flash Player CVE-2016-6985 is a memory corruption vulnerability affecting Windows/OS X and Linux builds (before 18.0.0.382; 19.x up to 23.x before 23.0.0.185 on Windows/macOS; before 11.2.202.637 on Linux) triggered by parsing of SWF content as described by the PSP and related advisories. T...

CVE-2017-2926

CVE-2017-2926 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable memory corruption in MP4 atom processing that could lead to arbitrary code execution. Connected advisories confirm the issue across multiple packages and architectures, recommending upgrade to Flash Play...

CVE-2017-3099

Adobe Flash Player

CVE-2010-3643

Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.

CVE-2010-3644

CVE-2010-3644 concerns an unspecified vulnerability in Adobe Flash Player prior to 9.0.289.0 and in the 10.x branch prior to 10.1.102.64 (Windows, macOS, Linux, Solaris) and 10.1.95.1 on Android. The flaw can allow execution of arbitrary code or a denial of service due to memory corruption, via u...

CVE-2010-3650

Technical details about CVE-2010-3650 are not publicly disclosed in the provided documents; monitor for updates from official advisories.

CVE-2013-1367

Technical details about CVE-2013-1367 are not publicly available in the provided connected documents. Monitor for updates from ENISA EUVD entries and other sources.

CVE-2014-0499

CVE-2014-0499 affects Adobe Flash Player (Windows, Mac OS X) and Adobe AIR/SDK components. The root cause is that these components do not prevent access to address information, aiding bypass of ASLR via unspecified vectors. Affected Flash Player versions include pre-11.7.700.269 and 11.8.x up to ...

CVE-2014-0574

CVE-2014-0574 is a double-free vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution via unspecified vectors. Public disclosures tie the issue to the Flash update APSB14-24; patches/updates were released (e.g., Flash Player 11.2.202.418 for some p...

CVE-2015-0316

Technical details (affected product/version, root cause, impact, or fix) for CVE-2015-0316 are not provided in the connected documents. Monitor for updates.

CVE-2015-5116

CVE-2015-5116 affects Adobe Flash Player and related AIR components. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors, impacting Windows/OS X Flash Player versions prior to 13.0.0.302 and 14.x through 18.x prior to 18.0.0.203, and Linux Flash Play...

CVE-2015-5560

Adobe Flash Player and related AIR components suffer an integer overflow in decoding ID3/other data that can lead to arbitrary code execution. Affected products include Flash Player before 18.0.0.232 on Windows/macOS and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (and AIR SDK/...

CVE-2015-7654

CVE-2015-7654 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. The issue allows arbitrary code execution via crafted attachSound arguments. Affected products/versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and macOS, and bef...

CVE-2015-8639

Technical details about CVE-2015-8639 are not provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-0964

Technical details about CVE-2016-0964 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-4135

CVE-2016-4135 is one of multiple Flash Player vulnerabilities addressed in mid‑2016 advisories. Connected sources show this entry being treated as a memory corruption issue in Adobe Flash Player (Flash libraries in IE/Edge) that contributes to heap-based buffers overflow and arbitrary code execut...

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4279

Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.