CVE-2015-7654

CVE-2015-7654 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. The issue allows arbitrary code execution via crafted attachSound arguments. Affected products/versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and macOS, and bef...

CVE-2015-8044

Technical details about CVE-2015-8044 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-8055

Technical details for CVE-2015-8055 are not publicly available in the provided documents. Connected EUVD entries mention malware context but do not specify affected products, root causes, or fixes. Monitor for updates.

CVE-2016-4153

CVE-2016-4153 is a memory‑corruption vulnerability in Adobe Flash Player’s ShimOpportunityGenerator.configure() that can cause a memory crash and, as described by a trusted report, could enable arbitrary code execution. The vulnerability is associated with Flash Player builds up to 21.0.0.242 and...

CVE-2016-6930

Technical details about CVE-2016-6930 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-7870

CVE-2016-7870 affects Adobe Flash Player versions 23.0.0.207 and earlier (Windows, Linux, etc.) with a buffer overflow/underflow in the RegExp class used for specific search strategies. Successful exploitation could lead to arbitrary code execution. Mitigation: upgrade to Flash Player 24.0.0.186 ...

CVE-2017-2938

Adobe Flash Player 24.x vulnerable: CVE-2017-2938 is a security bypass in the handling of TCP connections affecting Flash Player versions up to 24.0.0.186. Remediation per connected documents is upgrading to the patched build (24.0.0.194 or later) as part of APSB17-02/openSUSE update openSUSE-201...

CVE-2017-2984

CVE-2017-2984 is a heap-based buffer overflow vulnerability in Adobe Flash Player’s h264 decoder present in version 24.0.0.194 and earlier. Exploitation could lead to arbitrary code execution. Public advisories indicate remediation by upgrading to Flash Player 24.0.0.221 or newer (e.g., Arch Linu...

CVE-2017-2993

CVE-2017-2993 affects Adobe Flash Player up to version 24.0.0.194 and earlier. The issue is a use-after-free in event handler handling, potentially allowing arbitrary code execution. Exploitation can occur remotely via a crafted SWF file; impact is code execution with high severity. The standard ...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2008-5361

Adobe Flash Player and Adobe AIR are affected by CVE-2008-5361. The vulnerability arises because the ActionScript 2 VM does not verify a member element’s size when performing DefineConstantPool, ActionJump, ActionPush, and ActionTry (and related actions), enabling a remote attacker to read sensit...

CVE-2009-3794

CVE-2009-3794 describes a heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 triggered by crafted JPEG data in SWF files, enabling remote code execution. Connected advisories (e.g., RHSA-2009:1657/1658) indicate Red Hat patching Flash-Plugin with upgrade...

CVE-2010-2187

Technical details for CVE-2010-2187 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2216

CVE-2010-2216 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The description states that attackers can execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, and this is a distinct issue from CVE-20...

CVE-2010-3645

Adobe Flash Player is affected by CVE-2010-3645, with an unspecified vulnerability that allows remote code execution or memory corruption causing a denial of service. Affected products are Flash Player prior to 9.0.289.0 and 10.x prior to 10.1.102.64 across Windows, macOS, Linux, Solaris, and And...

CVE-2010-3652

Technical details for CVE-2010-3652 are not publicly available in the provided documents. Connected EUVD entries mention malware labels but do not specify affected products, root cause, or remediation. Monitor for updates and additional disclosures.

CVE-2011-2453

Adobe Flash Player and Adobe AIR are affected by CVE-2011-2453. The initial description lists that Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, macOS, Linux, and Solaris, and before 11.1.102.59 on Android, as well as AIR before 3.1.0.4880, are vulnerable via unspecified...

CVE-2013-0633

CVE-2013-0633 refers to a buffer overflow in Adobe Flash Player that allowed remote code execution via crafted SWF content. Affected versions include Windows and macOS builds prior to 10.3.183.51 and 11.x prior to 11.5.502.149; Linux prior to 10.3.183.51 and 11.x prior to 11.2.202.262; Android 2....

CVE-2013-1367

Technical details about CVE-2013-1367 are not publicly available in the provided connected documents. Monitor for updates from ENISA EUVD entries and other sources.

CVE-2013-1380

Adobe Flash Player and AIR are affected by CVE-2013-1380. The vulnerability enables arbitrary code execution or memory corruption via unspecified vectors and is mitigated by updating Flash Player to version 11.2.202.280 (and corresponding AIR fixes) as part of the openSUSE/OpenVAS advisories refe...

CVE-2014-0508

CVE-2014-0508 affects Adobe Flash Player prior to 11.7.700.275 and 11.8.x prior to 13.0.0.182 on Windows/macOS, and prior to 11.2.202.350 on Linux; Adobe AIR prior to 13.0.0.83 (Android) and AIR SDK/SDK & Compiler prior to 13.0.0.83. The issue is described as bypassing intended access restriction...

CVE-2015-0341

Adobe Flash Player is affected by CVE-2015-0341, a use-after-free in handling nested objects in SWF files that enables remote code execution. Exploitation is described as requiring a user to open a specially crafted SWF; the vulnerability can execute arbitrary code in the context of the user. Aff...

CVE-2015-3107

CVE-2015-3107 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that can lead to arbitrary code execution via unspecified vectors. Affected products include Flash Player on Windows, macOS, and Linux, with versions before 13.0.0.292 and earlier 18.x before 18.0.0...

CVE-2015-5558

CVE-2015-5558 affects Adobe Flash Player prior to 18.0.0.232 on Windows/OS X and prior to 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK/Compiler before 18.0.0.199). The underlying issue is a type confusion that enables arbitrary code execution when handling SWF content...

CVE-2015-7658

Technical details for CVE-2015-7658 are not provided in the connected documents. No affected products, versions, or fixes are specified here; monitor for updates.

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8646

Technical details on CVE-2015-8646 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-4125

CVE-2016-4125 is listed as an Adobe Flash Player vulnerability addressed by the 11.2.202.626 update (APSB16-18) across multiple Linux distributions (SUSE/openSUSE) and Red Hat advisories. The connected documents confirm the CVE is part of a batch of issues fixed in the Flash Player update and lin...

CVE-2016-4135

CVE-2016-4135 is one of multiple Flash Player vulnerabilities addressed in mid‑2016 advisories. Connected sources show this entry being treated as a memory corruption issue in Adobe Flash Player (Flash libraries in IE/Edge) that contributes to heap-based buffers overflow and arbitrary code execut...

CVE-2016-4156

CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...

CVE-2016-6927

Technical details for CVE-2016-6927 are not publicly available in the provided documents. Connected EUVD entries mention malware but do not describe the vulnerability. Monitor for updates.

CVE-2016-6931

Technical details for CVE-2016-6931 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-2988

CVE-2017-2988 is a memory corruption vulnerability in Adobe Flash Player (vulnerable up to 24.0.0.194) triggered during garbage collection, potentially enabling arbitrary code execution. Root cause: memory corruption during GC with vectors that can be exploited remotely; attack vector is NETWORK ...

CVE-2017-2998

CVE-2017-2998 is a memory corruption vulnerability in Adobe Flash Player ≤ 24.0.0.221, specifically in the Primetime TVSDK API functionality related to timeline interactions that could enable arbitrary code execution. Public postings in multiple advisories confirm a remote, user-triggered risk wi...

CVE-2017-3059

CVE-2017-3059 is a use-after-free vulnerability in Adobe Flash Player (internal script object) affecting version 25.0.0.127 and earlier. Exploitation could lead to arbitrary code execution. Public advisories and vendor updates indicate remediation by upgrading Flash Player to 25.0.0.148 (e.g., SU...

CVE-2017-3099

Adobe Flash Player

CVE-2018-12827

CVE-2018-12827 concerns an out-of-bounds read in Adobe Flash Player 30.0.0.134 and earlier, leading to information disclosure. Public details consistently list Flash Player as the affected component and the root cause as an out-of-bounds read. Exploitation has been demonstrated in public advisori...

CVE-2010-0187

CVE-2010-0187 affects Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130, allowing remote attackers to cause an application crash (DoS) via a modified SWF file. Connected advisories indicate updates to Flash Player (e.g., upgrade to 10.0.45.2) mitigate the issue (RHSA-2010-0102; ...

CVE-2010-2162

CVE-2010-2162 affects Adobe Flash Player before 9.0.277.0 and Flash Player 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610. The vulnerability arises from improper length calculations in the STSC, STSZ, and STCO atoms, enabling heap memory corruption that could crash the process or allow ...

CVE-2010-2165

Technical details for CVE-2010-2165 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2010-2166

Technical details for CVE-2010-2166 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2010-2177

Technical details about CVE-2010-2177 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor for updates from official sources.

CVE-2010-2180

Technical details for CVE-2010-2180 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-2214

CVE-2010-2214 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors and is described as a separate issue from CVE-2010-0209, CVE-2010-2213, and CVE-2010...

CVE-2010-3647

Technical details for CVE-2010-3647 are not publicly available in the provided connected documents. The initial description lists general vulnerabilities in Adobe Flash Player but does not specify affected versions, components, root cause, impact, or fixes.

CVE-2011-2426

CVE-2011-2426 is a stack-based overflow in Adobe Flash Player’s ActionScript Virtual Machine (AVM) exploited via remote vectors. The vulnerability affects Flash Player prior to the patched versions cited in Red Hat/SUSE advisories and related Nessus/OpenVAS entries, which describe AVM stack overf...

CVE-2014-0507

Adobe Flash Player and Adobe AIR are affected by CVE-2014-0507 due to a buffer overflow that could allow arbitrary code execution. Affected components include Flash Player on Windows/macOS (before 11.7.700.275, and 11.8.x up to 13.0.x before 13.0.0.182; Linux before 11.2.202.350) and Adobe AIR be...