CVE-2018-4935

Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...

CVE-2014-0534

CVE-2014-0534 is a vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components where attackers could bypass intended access restrictions via crafted SWF/vector exploits. The patched line is tied to APSB14-16; affected versions include Flash Player prior to 13.0.0.223 and...

CVE-2014-0574

CVE-2014-0574 is a double-free vulnerability in Adobe Flash Player (and related AIR components) that could allow remote code execution via unspecified vectors. Public disclosures tie the issue to the Flash update APSB14-24; patches/updates were released (e.g., Flash Player 11.2.202.418 for some p...

CVE-2015-3090

CVE-2015-3090 affects Adobe Flash Player prior to 13.0.0.289 and 14.x–17.x prior to 17.0.0.188 on Windows/macOS, and prior to 11.2.202.460 on Linux, plus Adobe AIR/SDK before 17.0.0.172. Connected sources indicate a shader operation-based memory corruption (ShaderJob) vulnerability that can enabl...

CVE-2015-3091

CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...

CVE-2015-3136

CVE-2015-3136 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components that allows arbitrary code execution via unspecified vectors. The flaw affects Flash Player before 13.0.0.302 and 14.x–18.x before 18.0.0.203, with AIR/AIR SDK before 18.0.0.180...

CVE-2015-5564

CVE-2015-5564 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products: Flash Player on Windows/OS X prior to 18.0.0.232 and Linux prior to 11.2.202.508; Adobe AIR prior to 18.0.0.199 and Adobe AIR SDK/Compiler prior to 18.0.0.199. The v...

CVE-2015-7654

CVE-2015-7654 is a use-after-free vulnerability in Adobe Flash Player and related AIR components. The issue allows arbitrary code execution via crafted attachSound arguments. Affected products/versions include Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and macOS, and bef...

CVE-2015-8044

Technical details about CVE-2015-8044 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-8639

Technical details about CVE-2015-8639 are not provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-4125

CVE-2016-4125 is listed as an Adobe Flash Player vulnerability addressed by the 11.2.202.626 update (APSB16-18) across multiple Linux distributions (SUSE/openSUSE) and Red Hat advisories. The connected documents confirm the CVE is part of a batch of issues fixed in the Flash Player update and lin...

CVE-2016-6930

Technical details about CVE-2016-6930 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

CVE-2017-2926

CVE-2017-2926 affects Adobe Flash Player versions 24.0.0.186 and earlier, with an exploitable memory corruption in MP4 atom processing that could lead to arbitrary code execution. Connected advisories confirm the issue across multiple packages and architectures, recommending upgrade to Flash Play...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2009-3794

CVE-2009-3794 describes a heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 triggered by crafted JPEG data in SWF files, enabling remote code execution. Connected advisories (e.g., RHSA-2009:1657/1658) indicate Red Hat patching Flash-Plugin with upgrade...

CVE-2010-3643

Technical details for CVE-2010-3643 are not publicly provided in the supplied Connected Documents. No concrete information on affected products, vulnerable components, impact, or remediation is available here; monitor for updates.

CVE-2011-0573

Technical details for CVE-2011-0573 are not publicly available in the provided documents; no affected products, root cause, or remediation details are given. Monitor for updates.

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2011-2134

CVE-2011-2134 is a buffer overflow in Adobe Flash Player (Windows/macOS/Linux/Solaris) and Adobe AIR that could allow arbitrary code execution via unspecified vectors. Affected products are Flash Player prior to 10.3.183.5 (and prior to 10.3.186.3 on Android) and AIR prior to 2.7.1.1961. Remediat...

CVE-2011-2425

Technical details for CVE-2011-2425 are not publicly provided in the supplied documents. Please monitor the connected sources for updates.

CVE-2013-1367

Technical details about CVE-2013-1367 are not publicly available in the provided connected documents. Monitor for updates from ENISA EUVD entries and other sources.

CVE-2013-1380

Adobe Flash Player and AIR are affected by CVE-2013-1380. The vulnerability enables arbitrary code execution or memory corruption via unspecified vectors and is mitigated by updating Flash Player to version 11.2.202.280 (and corresponding AIR fixes) as part of the openSUSE/OpenVAS advisories refe...

CVE-2014-0531

CVE-2014-0531 is an XSS vulnerability in Adobe Flash Player (and related AIR components) that could allow a remote attacker to inject arbitrary web script or HTML via unspecified vectors. Affected: Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X; Flash Player before ...

CVE-2014-0553

CVE-2014-0553 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. It affects Flash Player before 13.0.0.244 and 14.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux; also affects Adobe AIR before 15.0.0.249 (Windows/OS X). Ado...

CVE-2015-3096

CVE-2015-3096 relates to Adobe Flash Player and related AIR components; connected sources indicate a CSRF issue linked to an incomplete fix for CVE-2014-5333, enabling CSRF via crafted SWF/OBJECT content and potentially bypassing protections. Details about affected versions are provided in adviso...

CVE-2015-3137

CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (

CVE-2015-7658

Technical details for CVE-2015-7658 are not provided in the connected documents. No affected products, versions, or fixes are specified here; monitor for updates.

CVE-2015-8048

Technical details about CVE-2015-8048 are not publicly available in the provided documents. Monitor for updates and additional sources for affected products, impact, and remediation information.

CVE-2015-8436

Technical details about CVE-2015-8436 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current connected EUVD entries mention malware but do not describe vulnerabilities.

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4222

CVE-2016-4222 is a use-after-free vulnerability in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected: Windows and macOS Flash Player versions before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Impact: potential remote code executi...

CVE-2016-4279

Technical details about CVE-2016-4279 are not publicly provided in the connected documents. Monitor for updates. Information in EUVD entries mentions malware but does not describe affected software, root cause, or remediation.

CVE-2016-4285

Technical details for CVE-2016-4285 (affected software, components, exploit vectors, impact) are not publicly provided in the connected documents; monitor official advisories for updates.

CVE-2016-6927

Technical details for CVE-2016-6927 are not publicly available in the provided documents. Connected EUVD entries mention malware but do not describe the vulnerability. Monitor for updates.

CVE-2016-6929

Technical details about CVE-2016-6929 are not provided in the connected documents. The EUVD entries mention malware but do not specify affected products, impact, or remediation. Monitor for updates.

CVE-2016-6985

Adobe Flash Player CVE-2016-6985 is a memory corruption vulnerability affecting Windows/OS X and Linux builds (before 18.0.0.382; 19.x up to 23.x before 23.0.0.185 on Windows/macOS; before 11.2.202.637 on Linux) triggered by parsing of SWF content as described by the PSP and related advisories. T...

CVE-2016-7879

CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...

CVE-2008-4820

CVE-2008-4820 affects the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows, enabling information disclosure via unknown vectors. Connected sources indicate this issue was not fully resolved by a prior fix and that CVE-2009-3951 notes the vulnerability exists bec...

CVE-2008-5362

CVE-2008-5362 covers a vulnerability in the DefineConstantPool action of the ActionScript 2 VM in Adobe Flash Player 10.x (before 10.0.12.36) and 9.x (before 9.0.151.0), and Adobe AIR before 1.5. The issue arises when an untrusted input value is accepted for a "constant count," enabling a remote ...

CVE-2010-2175

Technical details about CVE-2010-2175 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2177

Technical details about CVE-2010-2177 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor for updates from official sources.

CVE-2010-2187

Technical details for CVE-2010-2187 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-3639

Adobe Flash Player (flash-plugin) contains multiple vulnerabilities tracked as CVE-2010-3639 and related 2010-36xx series. Public advisories (RHSA-2010-0829/0834/0867) indicate that updates fixed these flaws by upgrading Flash Player to version 10.1.102.64 (and earlier 9.0.289.0 in some releases)...

CVE-2011-0558

Adobe Flash Player contains a integer overflow vulnerability (CVE-2011-0558) in the ActionScript Function class that could allow remote code execution. Affected product: Flash Player prior to version 10.2.152.26. Root cause: overflow triggered by a large array length in Function-class code. Impac...

CVE-2012-5251

CVE-2012-5251 is a buffer overflow vulnerability in Adobe Flash Player (Windows, Mac OS X, Linux) and Adobe AIR prior to the versions listed in the initial description, allowing attackers to execute arbitrary code via unspecified vectors. The connected sources confirm this CVE is among multiple F...

CVE-2014-0506

Technical details about CVE-2014-0506 are not publicly provided in the supplied documents. The sources reference the vulnerability but do not include specifics on impact, affected products beyond Flash Player/AIR, or remediation. Monitor for updates.

CVE-2014-0507

Adobe Flash Player and Adobe AIR are affected by CVE-2014-0507 due to a buffer overflow that could allow arbitrary code execution. Affected components include Flash Player on Windows/macOS (before 11.7.700.275, and 11.8.x up to 13.0.x before 13.0.0.182; Linux before 11.2.202.350) and Adobe AIR be...

CVE-2014-0508

CVE-2014-0508 affects Adobe Flash Player prior to 11.7.700.275 and 11.8.x prior to 13.0.0.182 on Windows/macOS, and prior to 11.2.202.350 on Linux; Adobe AIR prior to 13.0.0.83 (Android) and AIR SDK/SDK & Compiler prior to 13.0.0.83. The issue is described as bypassing intended access restriction...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...