1084 matches found
CVE-2016-4149
CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...
CVE-2016-7858
CVE-2016-7858 is a use-after-free vulnerability in Adobe Flash Player that could allow remote arbitrary code execution. Affected products include Flash Player 23.0.0.205 and earlier and 11.2.202.643 and earlier (Windows/other platforms), with exploitation possible via processing a crafted SWF fil...
CVE-2017-11215
CVE-2017-11215 is a use-after-free vulnerability in Adobe Flash Player (Primetime SDK) affecting Flash Player 27.0.0.183 and earlier. It can lead to arbitrary code execution through memory corruption and control-flow hijack. Public exploits exist for this vulnerability; malware has been observed ...
CVE-2017-11282
Adobe Flash Player contains a memory corruption vulnerability (CVE-2017-11282) in the MP4 atom parser that could allow remote arbitrary code execution. Affected versions are 26.0.0.151 and earlier. Multiple connected advisories confirm the issue and note that a fix exists in version 27.0.0.130 or...
CVE-2010-3643
Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.
CVE-2010-3650
Technical details about CVE-2010-3650 are not publicly disclosed in the provided documents; monitor for updates from official advisories.
CVE-2014-0492
CVE-2014-0492 affects Adobe Flash Player and Adobe AIR components. The issue stems from an “address leak” that defeats ASLR, impacting Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows/Mac, and prior to 11.2.202.335 on Linux, as well as Adobe AIR before 4.0.0.13...
CVE-2014-0534
CVE-2014-0534 is a vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components where attackers could bypass intended access restrictions via crafted SWF/vector exploits. The patched line is tied to APSB14-16; affected versions include Flash Player prior to 13.0.0.223 and...
CVE-2015-0339
Adobe Flash Player vulnerability CVE-2015-0339 is a memory corruption flaw in Flash Player triggered by parsing a specially crafted SWF file. Affects Windows and OS X builds: Flash Player before 13.0.0.277 and 14.x up to 17.x before 17.0.0.134, and Linux before 11.2.202.451. Exploitation can lead...
CVE-2015-3101
CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...
CVE-2015-7657
Technical details for CVE-2015-7657 are not publicly available in the provided documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2015-7662
CVE-2015-7662 is a vulnerability in Adobe Flash Player and related AIR components where an attacker could bypass intended access restrictions and write to files. Affected products and versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 (Windows/macOS) and Linux AIR/SDK/Comp...
CVE-2015-8420
This CVE is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS) and Adobe AIR, with the following affected versions: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows/macOS; Flash Player on Linux before 11.2.202.554; Adobe AIR before 20.0.0.204; AIR SDK bef...
CVE-2016-4274
Technical details about CVE-2016-4274 are not publicly provided in the connected documents; monitor for updates from the original advisories and EUVD entries.
CVE-2017-11305
The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...
CVE-2017-2925
CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...
CVE-2017-2934
CVE-2017-2934 : Adobe Flash Player versions up to 24.0.0.186 contain an exploitable heap overflow in the JPEG/Adobe Texture Format parsing path. Successful exploitation could lead to arbitrary code execution on the affected host. Exploit evidence exists (Exploit-DB entry 41611; Arch/ Gentoo advis...
CVE-2017-3000
CVE-2017-3000 affects Adobe Flash Player
CVE-2017-3071
Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...
CVE-2011-0558
Adobe Flash Player contains a integer overflow vulnerability (CVE-2011-0558) in the ActionScript Function class that could allow remote code execution. Affected product: Flash Player prior to version 10.2.152.26. Root cause: overflow triggered by a large array length in Function-class code. Impac...
CVE-2011-0559
Adobe Flash Player versions prior to 10.2.152.26 are vulnerable to memory corruption that can lead to arbitrary code execution or a denial of service . The root cause is the use of a parameter as an object pointer within an unspecified ActionScript method when processing crafted parameters. This ...
CVE-2011-2416
Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...
CVE-2013-0647
Adobe Flash Player and Adobe AIR are affected by CVE-2013-0647, a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The affected products include Flash Player on Windows, Mac OS X, Linux, Android platforms,...
CVE-2014-0531
CVE-2014-0531 is an XSS vulnerability in Adobe Flash Player (and related AIR components) that could allow a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Affected: Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X; Flash Player before ...
CVE-2014-0553
CVE-2014-0553 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. It affects Flash Player before 13.0.0.244 and 14.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux; also affects Adobe AIR before 15.0.0.249 (Windows/OS X). Ado...
CVE-2015-3137
CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (
CVE-2015-8820
CVE-2015-8820 affects Adobe Flash Player prior to 18.0.0.268 and 19.x, and prior to 20.0.0.228 on Windows/OS X; prior to 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/Compiler before 20.0.0.204). The vulnerability allows attackers to execute arbitrary code or cause a denial...
CVE-2016-1105
CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...
CVE-2016-4153
CVE-2016-4153 is a memory‑corruption vulnerability in Adobe Flash Player’s ShimOpportunityGenerator.configure() that can cause a memory crash and, as described by a trusted report, could enable arbitrary code execution. The vulnerability is associated with Flash Player builds up to 21.0.0.242 and...
CVE-2016-4175
Technical details for CVE-2016-4175 are not publicly available in the provided connected documents; no affected product/version/impact data is specified beyond the initial description. Monitor for updates.
CVE-2017-2935
CVE-2017-2935 affects Adobe Flash Player 24.0.0.186 and earlier. Root cause: a heap overflow when processing the Flash Video container file format, leading to arbitrary code execution. Documents indicate an exploit exists (Exploit-DB link) and multiple advisories/patches recommend upgrading to ve...
CVE-2018-4944
CVE-2018-4944 affects Adobe Flash Player: a type-confusion vulnerability in versions 29.0.0.140 and earlier that could allow arbitrary code execution in the current user context. Public advisories reference APSB18-16; mitigation is to upgrade to a non‑vulnerable version (e.g., 29.0.0.171 or newer...
CVE-2009-3794
CVE-2009-3794 describes a heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 triggered by crafted JPEG data in SWF files, enabling remote code execution. Connected advisories (e.g., RHSA-2009:1657/1658) indicate Red Hat patching Flash-Plugin with upgrade...
CVE-2010-3639
Adobe Flash Player (flash-plugin) contains multiple vulnerabilities tracked as CVE-2010-3639 and related 2010-36xx series. Public advisories (RHSA-2010-0829/0834/0867) indicate that updates fixed these flaws by upgrading Flash Player to version 10.1.102.64 (and earlier 9.0.289.0 in some releases)...
CVE-2011-2427
Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...
CVE-2014-0499
CVE-2014-0499 affects Adobe Flash Player (Windows, Mac OS X) and Adobe AIR/SDK components. The root cause is that these components do not prevent access to address information, aiding bypass of ASLR via unspecified vectors. Affected Flash Player versions include pre-11.7.700.269 and 11.8.x up to ...
CVE-2015-0318
CVE-2015-0318 is a memory corruption vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux. It affects Flash Player versions prior to 13.0.0.269 and 14.x up to 16.x prior to 16.0.0.305 (Windows/OS X) and prior to 11.2.202.442 (Linux) and can lead to arbitrary code execution or de...
CVE-2015-3117
Technical details for CVE-2015-3117 are not publicly available in the provided documents. No specifics on affected products, root cause, or impact are provided here. Monitor for updates.
CVE-2015-5540
CVE-2015-5540 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR/AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. It is described as a different issue from CVE-2015-5127, CVE-2...
CVE-2015-5576
CVE-2015-5576 affects Adobe Flash Player and Adobe AIR components. The vulnerability arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors. Affected products/versions include Flash Player on Windows and OS X prior to 18.0.0...
CVE-2015-8658
Technical details for CVE-2015-8658 are not provided in the supplied documents; public specifics (affected software, impact, fixes) are not available here. Monitor for updates.
CVE-2016-0972
CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...
CVE-2016-1006
Adobe Flash Player vulnerability CVE-2016-1006 allows bypass of ASLR via JIT data. Affected products and versions (from the provided sources) include Windows and OS X Flash Player versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213, and Linux Flash Player before 11.2.202.616. The roo...
CVE-2016-4125
CVE-2016-4125 is listed as an Adobe Flash Player vulnerability addressed by the 11.2.202.626 update (APSB16-18) across multiple Linux distributions (SUSE/openSUSE) and Red Hat advisories. The connected documents confirm the CVE is part of a batch of issues fixed in the Flash Player update and lin...
CVE-2016-7863
CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...
CVE-2017-3059
CVE-2017-3059 is a use-after-free vulnerability in Adobe Flash Player (internal script object) affecting version 25.0.0.127 and earlier. Exploitation could lead to arbitrary code execution. Public advisories and vendor updates indicate remediation by upgrading Flash Player to 25.0.0.148 (e.g., SU...
CVE-2010-3649
Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.
CVE-2010-3976
CVE-2010-3976 describes an untrusted search path and DLL hijacking flaw in Adobe Flash Player prior to 9.0.289.0 and 10.x prior to 10.1.102.64 on Windows. The vulnerability allows local users, and possibly remote attackers, to execute arbitrary code by placing a malicious dwmapi.dll in the same f...