CVE-2017-2993

CVE-2017-2993 affects Adobe Flash Player up to version 24.0.0.194 and earlier. The issue is a use-after-free in event handler handling, potentially allowing arbitrary code execution. Exploitation can occur remotely via a crafted SWF file; impact is code execution with high severity. The standard ...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2008-5362

CVE-2008-5362 covers a vulnerability in the DefineConstantPool action of the ActionScript 2 VM in Adobe Flash Player 10.x (before 10.0.12.36) and 9.x (before 9.0.151.0), and Adobe AIR before 1.5. The issue arises when an untrusted input value is accepted for a "constant count," enabling a remote ...

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-2214

CVE-2010-2214 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is described as a separate issue from CVE-2010-0209, CVE-2010-2213, and CVE-2010...

CVE-2010-3645

Adobe Flash Player is affected by CVE-2010-3645, with an unspecified vulnerability that allows remote code execution or memory corruption causing a denial of service. Affected products are Flash Player prior to 9.0.289.0 and 10.x prior to 10.1.102.64 across Windows, macOS, Linux, Solaris, and And...

CVE-2010-3647

Technical details for CVE-2010-3647 are not publicly available in the provided connected documents. The initial description lists general vulnerabilities in Adobe Flash Player but does not specify affected versions, components, root cause, impact, or fixes.

CVE-2011-2426

CVE-2011-2426 is a stack-based overflow in Adobe Flash Player’s ActionScript Virtual Machine (AVM) exploited via remote vectors. The vulnerability affects Flash Player prior to the patched versions cited in Red Hat/SUSE advisories and related Nessus/OpenVAS entries, which describe AVM stack overf...

CVE-2014-0509

CVE-2014-0509 describes a cross-site scripting (XSS) vulnerability in Adobe Flash Player and Adobe AIR products prior to the listed versions. Affected: Flash Player on Windows/macOS (before 11.7.700.275 and 11.8.x–13.0.x before 13.0.0.182), Flash Player on Linux (before 11.2.202.350), and Adobe A...

CVE-2015-3101

CVE-2015-3101 describes a privilege-escalation path in the Flash broker when using Internet Explorer, affecting the Flash Player and related AIR components. The vulnerability is tied to a transition from Low Integrity to Medium Integrity via IE, with the impact (per the sources) being privilege e...

CVE-2015-3108

CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...

CVE-2015-8048

Technical details about CVE-2015-8048 are not publicly available in the provided documents. Monitor for updates and additional sources for affected products, impact, and remediation information.

CVE-2015-8647

CVE-2015-8647 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.324 and 19.x prior to 20.0.0.267 on Windows and macOS, and prior to 11.2.202.559 on Linux; Adobe AIR before 20.0.0.233 (and AIR SDK before/SDK & Compiler 20.0.0.233) allows arbitrary code execution via un...

CVE-2016-0990

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-1099

CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...

CVE-2016-4156

CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...

CVE-2016-4177

Adobe Flash Player CVE-2016-4177 is an in-the-wild memory corruption/arbitrary code execution vulnerability. The CVE affects Windows and macOS builds prior to 18.0.0.366 and 19.x up to 22.x before 22.0.0.209, and Linux builds before 11.2.202.632, with vectors unspecified in the provided sources. ...

CVE-2016-4271

Adobe Flash Player (Windows/macOS: prior to 18.0.0.375 and 19.x up to 23.x before 23.0.0.162; Linux: before 11.2.202.635) is associated with CVE-2016-4271, described as bypassing intended access restrictions and enabling information disclosure via unspecified vectors. Connected advisories show pa...

CVE-2016-6931

Technical details for CVE-2016-6931 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6987

CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....

CVE-2016-7862

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-7862) in versions up to 23.0.0.205–23.0.0.207 and 11.2.202.643–11.2.202.644 that could lead to arbitrary code execution. Exploitation involves SWF handling and is confirmed by multiple advisories; updated builds address the issu...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...

CVE-2018-12827

CVE-2018-12827 concerns an out-of-bounds read in Adobe Flash Player 30.0.0.134 and earlier, leading to information disclosure. Public details consistently list Flash Player as the affected component and the root cause as an out-of-bounds read. Exploitation has been demonstrated in public advisori...

CVE-2018-4932

Summary: CVE-2018-4932 affects Adobe Flash Player and is a Use-After-Free vulnerability that could allow remote code execution in the user context. The issue impacts Flash Player versions 29.0.0.113 and earlier. Public advisories (APSB18-08) describe a fix in newer releases; updated versions incl...

CVE-2018-5001

CVE-2018-5001 describes an out-of-bounds read in Adobe Flash Player prior to version 30.0.0.113, leading to information disclosure. Connected advisories (Arch Linux ASA-201806-7, FreeBSD VUXML 2DDE5A56, CVE listings) confirm the vulnerability affects Flash Player before 30.0.0.113 and is mitigate...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610 are affected by CVE-2008-4546. The issue allows a remote web server to trigger a denial of service (NULL pointer dereference, browser crash) by returning a different response on a second HTTP request,...

CVE-2010-2166

Technical details for CVE-2010-2166 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2010-2175

Technical details about CVE-2010-2175 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2177

Technical details about CVE-2010-2177 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor for updates from official sources.

CVE-2010-2216

CVE-2010-2216 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The description states that attackers can execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, and this is a distinct issue from CVE-20...

CVE-2013-0643

CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows remote code execution via crafted SWF content. Affected products include Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183....

CVE-2014-0507

Adobe Flash Player and Adobe AIR are affected by CVE-2014-0507 due to a buffer overflow that could allow arbitrary code execution. Affected components include Flash Player on Windows/macOS (before 11.7.700.275, and 11.8.x up to 13.0.x before 13.0.0.182; Linux before 11.2.202.350) and Adobe AIR be...

CVE-2014-0533

CVE-2014-0533 is an XSS vulnerability in Adobe Flash Player (affecting Windows/OS X paths to 13.0.0.223 and 14.x before 14.0.0.125; Linux path to 11.2.202.378) and in Adobe AIR/SDK components before 14.0.0.110. The vulnerability, described as allowing remote attackers to inject arbitrary web scri...

CVE-2015-0316

Technical details (affected product/version, root cause, impact, or fix) for CVE-2015-0316 are not provided in the connected documents. Monitor for updates.

CVE-2015-0337

CVE-2015-0337 concerns Adobe Flash Player, affected on Windows, macOS, and Linux. It allows a remote cross-domain policy bypass via unspecified vectors, as described in Adobe’s APSB15-05 advisory. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on ...

CVE-2015-0341

Adobe Flash Player is affected by CVE-2015-0341, a use-after-free in handling nested objects in SWF files that enables remote code execution. Exploitation is described as requiring a user to open a specially crafted SWF; the vulnerability can execute arbitrary code in the context of the user. Aff...

CVE-2015-3091

CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...

CVE-2015-3107

CVE-2015-3107 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that can lead to arbitrary code execution via unspecified vectors. Affected products include Flash Player on Windows, macOS, and Linux, with versions before 13.0.0.292 and earlier 18.x before 18.0.0...

CVE-2015-5547

Adobe Flash Player (and Adobe AIR) vulnerable to memory corruption via parsing a specially crafted SWF file, potentially enabling code execution. Affected: Flash Player before 18.0.0.232 (Windows/OS X) and before 11.2.202.508 (Linux); AIR before 18.0.0.199. Root cause: memory corruption from SWF ...

CVE-2015-5571

CVE-2015-5571 affects Adobe Flash Player and AIR products. It arises from incomplete SWF format restrictions, enabling CSRF against JSONP endpoints via a crafted OBJECT element containing SWF content that meets the callback API’s character-set requirements. Affected: Flash Player on Windows/OS X ...

CVE-2015-7643

Technical details for CVE-2015-7643 are not publicly available in the provided documents. Monitor for updates and include only information that is present in the sources.

CVE-2015-7647

CVE-2015-7647 affects Adobe Flash Player prior to 18.0.0.255 and 19.x prior to 19.0.0.226 on Windows/macOS, and prior to 11.2.202.540 on Linux. Root cause: a type confusion vulnerability (distinct from CVE-2015-7648) that allows arbitrary code execution. Public exploits exist (e.g., Exploit-DB en...

CVE-2015-7654

CVE-2015-7654 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. The issue allows arbitrary code execution via crafted attachSound arguments. Affected products/versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and macOS, and bef...

CVE-2015-8071

CVE-2015-8071 is a use-after-free vulnerability affecting Adobe Flash Player and related AIR components. Affected products include Flash Player on Windows/OS X (before 18.0.0.268; 19.x and 20.x before 20.0.0.228) and on Linux (before 11.2.202.554), as well as Adobe AIR before 20.0.0.204 and Adobe...

CVE-2015-8421

CVE-2015-8421 is a use-after-free vulnerability affecting Adobe Flash Player and related runtime components. Affected: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows and macOS; Flash Player before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204, Adobe AIR SDK before 2...

CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2015-8646

Technical details on CVE-2015-8646 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2016-0970

The CVE-2016-0970 entry concerns multiple Adobe products: Flash Player prior to 18.0.0.329 (and 19.x prior to 20.0.0.306 on Windows/OS X; prior to 11.2.202.569 on Linux) and Adobe AIR prior to 20.0.0.260 (including AIR SDK before 20.0.0.260 and AIR SDK & Compiler before 20.0.0.260). It describes ...