CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2016-0970

The CVE-2016-0970 entry concerns multiple Adobe products: Flash Player prior to 18.0.0.329 (and 19.x prior to 20.0.0.306 on Windows/OS X; prior to 11.2.202.569 on Linux) and Adobe AIR prior to 20.0.0.260 (including AIR SDK before 20.0.0.260 and AIR SDK & Compiler before 20.0.0.260). It describes ...

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-4173

Technical details about CVE-2016-4173 are not provided in the supplied documents. No affected products, versions, or fixes are specified here. Monitor official disclosures for updates.

CVE-2016-4283

Technical details for CVE-2016-4283 are not publicly provided in the provided documents. Monitor for updates.

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2017-2988

CVE-2017-2988 is a memory corruption vulnerability in Adobe Flash Player (vulnerable up to 24.0.0.194) triggered during garbage collection, potentially enabling arbitrary code execution. Root cause: memory corruption during GC with vectors that can be exploited remotely; attack vector is NETWORK ...

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2011-2134

CVE-2011-2134 is a buffer overflow in Adobe Flash Player (Windows/macOS/Linux/Solaris) and Adobe AIR that could allow arbitrary code execution via unspecified vectors. Affected products are Flash Player prior to 10.3.183.5 (and prior to 10.3.186.3 on Android) and AIR prior to 2.7.1.1961. Remediat...

CVE-2014-0553

CVE-2014-0553 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. It affects Flash Player before 13.0.0.244 and 14.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux; also affects Adobe AIR before 15.0.0.249 (Windows/OS X). Ado...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-3136

CVE-2015-3136 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components that allows arbitrary code execution via unspecified vectors. The flaw affects Flash Player before 13.0.0.302 and 14.x–18.x before 18.0.0.203, with AIR/AIR SDK before 18.0.0.180...

CVE-2015-3137

CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (

CVE-2015-5551

CVE-2015-5551 refers to a use-after-free vulnerability in Adobe Flash Player and related AIR components that enables remote code execution via unspecified vectors. Affected: Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199; AIR SDK before...

CVE-2015-5563

Technical details for CVE-2015-5563 are not publicly available in the provided documents. Monitor for updates from authoritative advisories; current files do not specify affected products/versions, root cause, impact, or fixes within this dataset.

CVE-2015-5567

CVE-2015-5567 describes a stack memory corruption vulnerability in Adobe Flash Player and Adobe AIR that could allow remote code execution or a denial of service. Affected software and versions (as stated): Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X; Flash on Linux ...

CVE-2016-0988

Technical details for CVE-2016-0988 are not publicly provided in the connected documents above; no concrete affected versions, vulnerable components, or remediation are present. Monitor for updates.

CVE-2016-1000

Technical details about CVE-2016-1000 are not publicly provided in the supplied documents; no vendor, affected products, or remediation details are present. Monitor for updates.

CVE-2016-1005

CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2016-4141

CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.

CVE-2016-4176

Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...

CVE-2016-6921

Adobe Flash Player contains a use-after-free vulnerability rated HIGH, affecting Windows/OS X builds before 18.0.0.375 and 19.x–23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows arbitrary code execution via unspecified vectors and is a separate vulnerability from CVE-2016-42...

CVE-2016-6922

Technical details for CVE-2016-6922 are not publicly available in the provided connected documents. Monitor the EUVD entries and other sources for updates; no specific affected products, impact, or remediation are provided here.

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2018-5008

CVE-2018-5008 is an Adobe Flash Player out-of-bounds read vulnerability reported in Flash Player 30.0.0.113 and earlier. Connected sources confirm it enables information disclosure and is part of APSB18-24 alongside CVE-2018-5007 (arbitrary code execution). Public details specify affected compone...

CVE-2010-2165

Technical details for CVE-2010-2165 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2010-2180

Technical details for CVE-2010-2180 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2011-2137

CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....

CVE-2011-2414

CVE-2011-2414: Buffer overflow in Adobe Flash Player (pre-10.3.183.5 Windows/Mac/Linux/Solaris; pre-10.3.186.3 Android) and Adobe AIR (pre-2.7.1) allowing arbitrary code execution via unspecified vectors. Public references link to Adobe APSB11-21; openSUSE/SUSE patches (flash-player-4976) address...

CVE-2013-0504

CVE-2013-0504 is a buffer overflow in Adobe Flash Player’s broker service that allows arbitrary code execution. Affected versions include Windows and Mac OS X builds prior to 10.3.183.67, and 11.x prior to 11.6.602.171 for Windows/Mac; and Linux builds prior to 11.2.202.273. Connected advisories ...

CVE-2014-0532

CVE-2014-0532 is an XSS vulnerability in Adobe Flash Player and the Flash/AIR components, allowing remote script injection via unspecified vectors. Affected: Windows and OS X Flash Player prior to 13.0.0.223, and Flash Player 14.x prior to 14.0.0.125; Linux Flash Player prior to 11.2.202.378; Ado...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-5333

Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...

CVE-2015-0334

CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...

CVE-2015-3083

CVE-2015-3083 affects Adobe Flash Player and Adobe AIR. The issue is a validation bypass in Flash Player by an error in the Flash IE broker while parsing a specially crafted SWF/file, allowing a remote attacker to bypass restrictions on filesystem write operations (via unspecified vectors). Affec...

CVE-2015-3096

CVE-2015-3096 relates to Adobe Flash Player and related AIR components; connected sources indicate a CSRF issue linked to an incomplete fix for CVE-2014-5333, enabling CSRF via crafted SWF/OBJECT content and potentially bypassing protections. Details about affected versions are provided in adviso...

CVE-2015-3117

Technical details for CVE-2015-3117 are not publicly available in the provided documents. No specifics on affected products, root cause, or impact are provided here. Monitor for updates.

CVE-2015-3129

Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.

CVE-2015-5560

Adobe Flash Player and related AIR components suffer an integer overflow in decoding ID3/other data that can lead to arbitrary code execution. Affected products include Flash Player before 18.0.0.232 on Windows/macOS and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (and AIR SDK/...

CVE-2015-7628

Adobe Flash Player and related AIR components contain a Same Origin Policy bypass vulnerability (CVE-2015-7628) that could lead to information disclosure. Affected products include Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/macOS, and before 11.2.202.535 on Linux, plus A...

CVE-2015-8046

Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.

CVE-2015-8058

Technical details for CVE-2015-8058 are not publicly provided in the supplied documents. No concrete impact, exploit, or remediation details are present. Monitor for updates from official advisories.

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8426

Technical details about CVE-2015-8426 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories.

CVE-2015-8643

Technical details about CVE-2015-8643 are not publicly available in the provided connected documents. Monitor for updates and additional disclosures to determine affected products, root cause, and remediation.