CVE-2018-4944

CVE-2018-4944 affects Adobe Flash Player: a type-confusion vulnerability in versions 29.0.0.140 and earlier that could allow arbitrary code execution in the current user context. Public advisories reference APSB18-16; mitigation is to upgrade to a non‑vulnerable version (e.g., 29.0.0.171 or newer...

CVE-2010-2162

CVE-2010-2162 affects Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. The vulnerability arises from improper length calculations in the STSC, STSZ, and STCO atoms, enabling heap memory corruption that could crash the process or allow ...

CVE-2011-2135

Technical details for CVE-2011-2135 are not publicly available in the provided documents; the connected EUVD entries mention malware but do not specify this CVE's affected products or fixes. Monitor for updates.

CVE-2011-2137

CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....

CVE-2013-0647

Adobe Flash Player and Adobe AIR are affected by CVE-2013-0647, a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. The affected products include Flash Player on Windows, Mac OS X, Linux, Android platforms,...

CVE-2014-0531

CVE-2014-0531 is an XSS vulnerability in Adobe Flash Player (and related AIR components) that could allow a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Affected: Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X; Flash Player before ...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-5561

CVE-2015-5561 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components that potentially allows remote code execution. Affected products and versions (per the description) include: Flash Player before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux;...

CVE-2015-8444

The CVE-2015-8444 entry covers vulnerabilities in Adobe Flash Player and Adobe AIR family where: affected products include Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows/macOS, and before 11.2.202.554 on Linux, plus Adobe AIR before 20.0.0.204 (and AIR SDK/SDK & Com...

CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

CVE-2016-1012

Technical details about CVE-2016-1012 are not provided in the supplied documents. Monitor EUVD entries for updates; no public details on affected products, impact, or fixes are included here.

CVE-2016-4149

CVE-2016-4149 is part of a set of vulnerabilities in Adobe Flash Player. Connected advisories note the issue alongside multiple other CVEs (notably in 4122–4149) and describe vulnerabilities in the Flash Player libraries used by Microsoft IE/Edge. Public updates from Mageia list CVE-2016-4149 as ...

CVE-2017-2934

CVE-2017-2934 : Adobe Flash Player versions up to 24.0.0.186 contain an exploitable heap overflow in the JPEG/Adobe Texture Format parsing path. Successful exploitation could lead to arbitrary code execution on the affected host. Exploit evidence exists (Exploit-DB entry 41611; Arch/ Gentoo advis...

CVE-2017-3000

CVE-2017-3000 affects Adobe Flash Player

CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

CVE-2017-3106

Adobe Flash Player

CVE-2010-3649

Technical details about CVE-2010-3649 are not provided in the supplied documents; monitor for updates.

CVE-2011-2416

Adobe Flash Player and Adobe AIR are affected by an integer overflow that could allow arbitrary code execution. Affected: Flash Player before 10.3.183.5 on Windows/Mac/Linux/Solaris and before 10.3.186.3 on Android; AIR before 2.7.1 on Windows/Mac and before 2.7.1.1961 on Android. CVE-2011-2416 i...

CVE-2014-0534

CVE-2014-0534 is a vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components where attackers could bypass intended access restrictions via crafted SWF/vector exploits. The patched line is tied to APSB14-16; affected versions include Flash Player prior to 13.0.0.223 and...

CVE-2014-0539

CVE-2014-0539 is a security-bypass vulnerability affecting Adobe Flash Player and Adobe AIR (and related SDK components). The issue, described together with CVE-2014-0537, stems from insufficient security restrictions when handling specially crafted SWF content, enabling bypass of intended access...

CVE-2014-0553

CVE-2014-0553 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. It affects Flash Player before 13.0.0.244 and 14.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux; also affects Adobe AIR before 15.0.0.249 (Windows/OS X). Ado...

CVE-2015-0318

CVE-2015-0318 is a memory corruption vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux. It affects Flash Player versions prior to 13.0.0.269 and 14.x up to 16.x prior to 16.0.0.305 (Windows/OS X) and prior to 11.2.202.442 (Linux) and can lead to arbitrary code execution or de...

CVE-2015-0356

Adobe Flash Player contains a type confusion vulnerability (CVE-2015-0356) that could allow arbitrary code execution. Affected versions are Windows and macOS: before 13.0.0.281 and 14.x through 17.x before 17.0.0.169; Linux: before 11.2.202.457. Root cause is a type confusion handling certain SWF...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-5540

CVE-2015-5540 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X: before 18.0.0.232; Linux: before 11.2.202.508) and in Adobe AIR/AIR SDK before 18.0.0.199, allowing arbitrary code execution via unspecified vectors. It is described as a different issue from CVE-2015-5127, CVE-2...

CVE-2015-5546

CVE-2015-5546 concerns Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and associated AIR SDK/SDK & Compiler, where memory corruption during SWF parsing can allow a remote attacker to execute arbitrary code or cause a denial of servic...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2016-4279

Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.

CVE-2016-4284

Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...

CVE-2016-7867

CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...

CVE-2017-2926

CVE-2017-2926 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable memory corruption in MP4 atom processing that could lead to arbitrary code execution. Connected advisories confirm the issue across multiple packages and architectures, recommending upgrade to Flash Play...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2017-3099

Adobe Flash Player

CVE-2010-3643

Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.

CVE-2010-3644

CVE-2010-3644 concerns an unspecified vulnerability in Adobe Flash Player prior to 9.0.289.0 and in the 10.x branch prior to 10.1.102.64 (Windows, macOS, Linux, Solaris) and 10.1.95.1 on Android. The flaw can allow execution of arbitrary code or a denial of service due to memory corruption, via u...

CVE-2010-3650

Technical details about CVE-2010-3650 are not publicly disclosed in the provided documents; monitor for updates from official advisories.

CVE-2010-3652

Technical details for CVE-2010-3652 are not publicly available in the provided documents. Connected EUVD entries mention malware labels but do not specify affected products, root cause, or remediation. Monitor for updates and additional disclosures.

CVE-2011-0559

Technical details for CVE-2011-0559 are not present in the provided connected documents. Public information on affected components, root cause, and fixes is not available here; monitor for updates.

CVE-2011-0573

Technical details for CVE-2011-0573 are not publicly available in the provided documents; no affected products, root cause, or remediation details are given. Monitor for updates.

CVE-2011-2427

Adobe Flash Player AVM stack-based overflow (CVE-2011-2427) affects the ActionScript Virtual Machine in desktop platforms (Windows, macOS, Linux, Solaris) and Android prior to versions 10.3.183.10 (desktop) and 10.3.186.7 (Android). The vulnerability allows arbitrary code execution or a denial of...

CVE-2014-0574

CVE-2014-0574 is a double-free vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution via unspecified vectors. Public disclosures tie the issue to the Flash update APSB14-24; patches/updates were released (e.g., Flash Player 11.2.202.418 for some p...

CVE-2015-3091

CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...

CVE-2015-5116

CVE-2015-5116 affects Adobe Flash Player and related AIR components. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors, impacting Windows/OS X Flash Player versions prior to 13.0.0.302 and 14.x through 18.x prior to 18.0.0.203, and Linux Flash Play...

CVE-2015-5576

CVE-2015-5576 affects Adobe Flash Player and Adobe AIR components. The vulnerability arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors. Affected products/versions include Flash Player on Windows and OS X prior to 18.0.0...

CVE-2015-8055

Technical details for CVE-2015-8055 are not publicly available in the provided documents. Connected EUVD entries mention malware context but do not specify affected products, root causes, or fixes. Monitor for updates.

CVE-2015-8652

Technical details for CVE-2015-8652 are not publicly provided in the supplied connected documents; monitor for updates.

CVE-2016-1006

Adobe Flash Player vulnerability CVE-2016-1006 allows bypass of ASLR via JIT data. Affected products and versions (from the provided sources) include Windows and OS X Flash Player versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213, and Linux Flash Player before 11.2.202.616. The roo...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...