1084 matches found
CVE-2015-3117
Technical details for CVE-2015-3117 are not publicly available in the provided documents. No specifics on affected products, root cause, or impact are provided here. Monitor for updates.
CVE-2015-5546
CVE-2015-5546 concerns Adobe Flash Player prior to 18.0.0.232 (Windows/OS X) and 11.2.202.508 (Linux), Adobe AIR prior to 18.0.0.199, and associated AIR SDK/SDK & Compiler, where memory corruption during SWF parsing can allow a remote attacker to execute arbitrary code or cause a denial of servic...
CVE-2015-5576
CVE-2015-5576 affects Adobe Flash Player and Adobe AIR components. The vulnerability arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors. Affected products/versions include Flash Player on Windows and OS X prior to 18.0.0...
CVE-2015-8048
Technical details about CVE-2015-8048 are not publicly available in the provided documents. Monitor for updates and additional sources for affected products, impact, and remediation information.
CVE-2015-8646
Technical details on CVE-2015-8646 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2016-1006
Adobe Flash Player vulnerability CVE-2016-1006 allows bypass of ASLR via JIT data. Affected products and versions (from the provided sources) include Windows and OS X Flash Player versions before 18.0.0.343 and 19.x up to 21.x before 21.0.0.213, and Linux Flash Player before 11.2.202.616. The roo...
CVE-2016-1098
Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.
CVE-2016-4146
CVE-2016-4146 is a Flash Player vulnerability affecting Adobe Flash Player in the browser plugins used by IE/Edge, with a focus on memory corruption/use-after-free conditions that could lead to arbitrary code execution. Public advisories (e.g., Mageia and ALT Linux) group it with other CVEs (4122...
CVE-2016-7863
CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...
CVE-2017-3059
CVE-2017-3059 is a use-after-free vulnerability in Adobe Flash Player (internal script object) affecting version 25.0.0.127 and earlier. Exploitation could lead to arbitrary code execution. Public advisories and vendor updates indicate remediation by upgrading Flash Player to 25.0.0.148 (e.g., SU...
CVE-2017-3099
Adobe Flash Player
CVE-2010-2177
Technical details about CVE-2010-2177 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor for updates from official sources.
CVE-2011-2107
A cross-site scripting (XSS) vulnerability exists in Adobe Flash Player versions before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and versions before 10.3.185.22 on Android. This flaw, characterized as a "universal cross-site scripting vulnerability," allows remote attackers to inject...
CVE-2011-2425
Technical details for CVE-2011-2425 are not publicly provided in the supplied documents. Please monitor the connected sources for updates.
CVE-2013-1380
Adobe Flash Player and AIR are affected by CVE-2013-1380. The vulnerability enables arbitrary code execution or memory corruption via unspecified vectors and is mitigated by updating Flash Player to version 11.2.202.280 (and corresponding AIR fixes) as part of the openSUSE/OpenVAS advisories refe...
CVE-2014-0539
CVE-2014-0539 is a security-bypass vulnerability affecting Adobe Flash Player and Adobe AIR (and related SDK components). The issue, described together with CVE-2014-0537, stems from insufficient security restrictions when handling specially crafted SWF content, enabling bypass of intended access...
CVE-2015-3108
CVE-2015-3108 describes a memory disclosure vulnerability in Adobe Flash Player and related AIR components that bypasses ASLR by not properly restricting discovery of memory addresses. Affected products include Flash Player on Windows, macOS, and Linux (versions listed in the entry), and Adobe AI...
CVE-2015-7652
CVE-2015-7652 is a use-after-free vulnerability in Adobe Flash Player (Windows/OS X) and Adobe AIR with a crafted gridFitType value, allowing arbitrary code execution. Affected: Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows/OS X; Flash for Linux before 11.2.202.548; Adobe A...
CVE-2015-7654
CVE-2015-7654 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. The issue allows arbitrary code execution via crafted attachSound arguments. Affected products/versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and macOS, and bef...
CVE-2015-8044
Technical details about CVE-2015-8044 are not publicly available in the provided connected documents; monitor for updates.
CVE-2015-8049
Technical details about CVE-2015-8049 are not provided in the connected documents. Monitor official advisories for updates; the supplied materials do not specify affected products/versions or fixes.
CVE-2015-8055
Technical details for CVE-2015-8055 are not publicly available in the provided documents. Connected EUVD entries mention malware context but do not specify affected products, root causes, or fixes. Monitor for updates.
CVE-2015-8639
Technical details about CVE-2015-8639 are not provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2015-8649
Technical details about CVE-2015-8649 are not provided in the connected documents. The EUVD entries reference malware unrelated to this CVE. Monitor for updates.
CVE-2016-4156
CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...
CVE-2016-4279
Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.
CVE-2016-4284
Adobe Flash Player vulnerability CVE-2016-4284 affects Windows and OS X versions before 18.0.0.375 and 19.x—23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows execution of arbitrary code or memory corruption leading to denial of service via unspecified vectors. Root cause and...
CVE-2016-6930
Technical details about CVE-2016-6930 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2016-7867
CVE-2016-7867 affects Adobe Flash Player before 24.0.0.186 (Linux/NPAPI legacy and Windows/ActiveX contexts in multiple advisories). The vulnerability is a buffer overflow/underflow in the RegExp class related to bookmarking in searches, leading to arbitrary code execution when exploited. Arch Li...
CVE-2017-2991
Adobe Flash Player versions 24.0.0.194 and earlier contain a memory corruption vulnerability in the h264 codec (decompression). Successful exploitation could lead to arbitrary code execution. The CVE is referenced across multiple advisories, with fixes in version 24.0.0.221 (and newer) recommende...
CVE-2017-3002
CVE-2017-3002 is an Adobe Flash Player vulnerability describing a use-after-free in the ActionScript2 TextField object. Affected: Flash Player 24.0.0.221 and earlier. Impact and exploitation: could allow arbitrary code execution on a remote host. Public advisories note multiple patches; upgrades ...
CVE-2017-3106
Adobe Flash Player
CVE-2018-4935
Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...
CVE-2010-2214
CVE-2010-2214 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is described as a separate issue from CVE-2010-0209, CVE-2010-2213, and CVE-2010...
CVE-2010-3644
CVE-2010-3644 concerns an unspecified vulnerability in Adobe Flash Player prior to 9.0.289.0 and in the 10.x branch prior to 10.1.102.64 (Windows, macOS, Linux, Solaris) and 10.1.95.1 on Android. The flaw can allow execution of arbitrary code or a denial of service due to memory corruption, via u...
CVE-2012-5251
CVE-2012-5251 is a buffer overflow vulnerability in Adobe Flash Player (Windows, Mac OS X, Linux) and Adobe AIR prior to the versions listed in the initial description, allowing attackers to execute arbitrary code via unspecified vectors. The connected sources confirm this CVE is among multiple F...
CVE-2015-0316
Technical details (affected product/version, root cause, impact, or fix) for CVE-2015-0316 are not provided in the connected documents. Monitor for updates.
CVE-2015-3077
Summary (CVE-2015-3077) : A type-confusion bug in Adobe Flash Player’s Button/ MovieClip filter setters allowed an attacker to overwrite a filter constructor, causing the native filter object to be backed by a differently-typed object. This enables manipulation of internal filter data via object ...
CVE-2015-3089
CVE-2015-3089 affects Adobe Flash Player prior to 13.0.0.289 and 14.x up to 17.x prior to 17.0.0.188 (Windows/macOS) and prior to 11.2.202.460 on Linux, as well as Adobe AIR and AIR SDKs up to 17.0.0.172. It causes memory corruption leading to arbitrary code execution or denial of service via uns...
CVE-2015-3091
CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...
CVE-2015-3107
CVE-2015-3107 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that can lead to arbitrary code execution via unspecified vectors. Affected products include Flash Player on Windows, macOS, and Linux, with versions before 13.0.0.292 and earlier 18.x before 18.0.0...
CVE-2015-4433
CVE-2015-4433 describes a type confusion vulnerability in Adobe Flash Player and Adobe AIR that can lead to remote code execution. Affected products include Flash Player on Windows/OS X before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203, Linux Flash Player before 11.2.202.481, and Adobe AIR ...
CVE-2015-7629
CVE-2015-7629 is a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and in Adobe AIR before 19.0.0.213 (and AIR SDK/SDK & Compiler before 19.0.0.213) that allows arbitrary code execution via a crafted Text...
CVE-2015-7658
Technical details for CVE-2015-7658 are not provided in the connected documents. No affected products, versions, or fixes are specified here; monitor for updates.
CVE-2015-8421
CVE-2015-8421 is a use-after-free vulnerability affecting Adobe Flash Player and related runtime components. Affected: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows and macOS; Flash Player before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204, Adobe AIR SDK before 2...
CVE-2015-8422
Technical details for CVE-2015-8422 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or fixes can be confirmed from the supplied sources.
CVE-2015-8426
Technical details about CVE-2015-8426 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories.
CVE-2015-8652
Technical details for CVE-2015-8652 are not publicly provided in the supplied connected documents; monitor for updates.
CVE-2016-4141
CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...