CVE-2010-3639

Adobe Flash Player (flash-plugin) contains multiple vulnerabilities tracked as CVE-2010-3639 and related 2010-36xx series. Public advisories (RHSA-2010-0829/0834/0867) indicate that updates fixed these flaws by upgrading Flash Player to version 10.1.102.64 (and earlier 9.0.289.0 in some releases)...

CVE-2011-0558

Adobe Flash Player contains a integer overflow vulnerability (CVE-2011-0558) in the ActionScript Function class that could allow remote code execution. Affected product: Flash Player prior to version 10.2.152.26. Root cause: overflow triggered by a large array length in Function-class code. Impac...

CVE-2012-5251

CVE-2012-5251 is a buffer overflow vulnerability in Adobe Flash Player (Windows, Mac OS X, Linux) and Adobe AIR prior to the versions listed in the initial description, allowing attackers to execute arbitrary code via unspecified vectors. The connected sources confirm this CVE is among multiple F...

CVE-2014-0506

Technical details about CVE-2014-0506 are not publicly provided in the supplied documents. The sources reference the vulnerability but do not include specifics on impact, affected products beyond Flash Player/AIR, or remediation. Monitor for updates.

CVE-2014-0507

Adobe Flash Player and Adobe AIR are affected by CVE-2014-0507 due to a buffer overflow that could allow arbitrary code execution. Affected components include Flash Player on Windows/macOS (before 11.7.700.275, and 11.8.x up to 13.0.x before 13.0.0.182; Linux before 11.2.202.350) and Adobe AIR be...

CVE-2014-0508

CVE-2014-0508 affects Adobe Flash Player prior to 11.7.700.275 and 11.8.x prior to 13.0.0.182 on Windows/macOS, and prior to 11.2.202.350 on Linux; Adobe AIR prior to 13.0.0.83 (Android) and AIR SDK/SDK & Compiler prior to 13.0.0.83. The issue is described as bypassing intended access restriction...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...

CVE-2015-0316

Technical details (affected product/version, root cause, impact, or fix) for CVE-2015-0316 are not provided in the connected documents. Monitor for updates.

CVE-2015-3117

Technical details for CVE-2015-3117 are not publicly available in the provided documents. No specifics on affected products, root cause, or impact are provided here. Monitor for updates.

CVE-2015-6676

CVE-2015-6676 is a buffer overflow vulnerability in Adobe Flash Player and related AIR components. Affected: Flash Player on Windows/macOS prior to 18.0.0.241 and 19.x prior to 19.0.0.185, Linux prior to 11.2.202.521; AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Description notes...

CVE-2015-6682

CVE-2015-6682 is a use-after-free in Adobe Flash Player (and related AIR components) that enables remote code execution via specially crafted SWF handling. Affected products include Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and macOS, and before 11.2.202.521 on Linux; A...

CVE-2015-7628

Adobe Flash Player and related AIR components contain a Same Origin Policy bypass vulnerability (CVE-2015-7628) that could lead to information disclosure. Affected products include Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/macOS, and before 11.2.202.535 on Linux, plus A...

CVE-2015-7629

CVE-2015-7629 is a use-after-free vulnerability in Adobe Flash Player (pre-18.0.0.252 and 19.x before 19.0.0.207 on Windows/OS X; before 11.2.202.535 on Linux) and in Adobe AIR before 19.0.0.213 (and AIR SDK/SDK & Compiler before 19.0.0.213) that allows arbitrary code execution via a crafted Text...

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8421

CVE-2015-8421 is a use-after-free vulnerability affecting Adobe Flash Player and related runtime components. Affected: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows and macOS; Flash Player before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204, Adobe AIR SDK before 2...

CVE-2015-8426

Technical details about CVE-2015-8426 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories.

CVE-2015-8646

Technical details on CVE-2015-8646 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8649

Technical details about CVE-2015-8649 are not provided in the connected documents. The EUVD entries reference malware unrelated to this CVE. Monitor for updates.

CVE-2016-0990

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0995

Technical details for CVE-2016-0995 are not publicly provided in the supplied documents; no affected products, vectors, or remediation are specified here. Monitor for updates.

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-4141

CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...

CVE-2016-4156

CVE-2016-4156 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Edge. The description notes unknown impact and attack vectors and distinguishes it from MS16-083. Connected documents show this family ...

CVE-2016-6992

Adobe Flash Player vulnerability CVE-2016-6992 is a type confusion flaw that could allow remote code execution. Affected products include Flash Player on Windows, macOS (before 18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). Connected advisories indicate fixes were re...

CVE-2016-7863

CVE-2016-7863 is a use-after-free vulnerability in Adobe Flash Player reported in 2016, affecting Flash Player versions 23.0.0.205 and earlier and 11.2.202.643 and earlier, with successful exploitation able to execute arbitrary code. Multiple downstream advisories confirm a remediation via update...

CVE-2017-2938

Adobe Flash Player 24.x vulnerable: CVE-2017-2938 is a security bypass in the handling of TCP connections affecting Flash Player versions up to 24.0.0.186. Remediation per connected documents is upgrading to the patched build (24.0.0.194 or later) as part of APSB17-02/openSUSE update openSUSE-201...

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2999

Adobe Flash Player versions 24.0.0.221 and earlier are affected by a memory corruption vulnerability in the Primetime TVSDK hosting playback surface that could allow arbitrary code execution. Exploitation is described as exploitable and could lead to code execution. Several connected advisories i...

CVE-2017-3059

CVE-2017-3059 is a use-after-free vulnerability in Adobe Flash Player (internal script object) affecting version 25.0.0.127 and earlier. Exploitation could lead to arbitrary code execution. Public advisories and vendor updates indicate remediation by upgrading Flash Player to 25.0.0.148 (e.g., SU...

CVE-2010-0187

CVE-2010-0187 affects Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130, allowing remote attackers to cause an application crash (DoS) via a modified SWF file. Connected advisories indicate updates to Flash Player (e.g., upgrade to 10.0.45.2) mitigate the issue (RHSA-2010-0102; ...

CVE-2010-2166

Technical details for CVE-2010-2166 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2010-2180

Technical details for CVE-2010-2180 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-2216

CVE-2010-2216 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The description states that attackers can execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, and this is a distinct issue from CVE-20...

CVE-2010-3976

CVE-2010-3976 describes an untrusted search path and DLL hijacking flaw in Adobe Flash Player prior to 9.0.289.0 and 10.x prior to 10.1.102.64 on Windows. The vulnerability allows local users, and possibly remote attackers, to execute arbitrary code by placing a malicious dwmapi.dll in the same f...

CVE-2011-2426

CVE-2011-2426 is a stack-based overflow in Adobe Flash Player’s ActionScript Virtual Machine (AVM) exploited via remote vectors. The vulnerability affects Flash Player prior to the patched versions cited in Red Hat/SUSE advisories and related Nessus/OpenVAS entries, which describe AVM stack overf...

CVE-2013-0633

CVE-2013-0633 refers to a buffer overflow in Adobe Flash Player that allowed remote code execution via crafted SWF content. Affected versions include Windows and macOS builds prior to 10.3.183.51 and 11.x prior to 11.5.502.149; Linux prior to 10.3.183.51 and 11.x prior to 11.2.202.262; Android 2....

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-0584

CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...

CVE-2015-0337

CVE-2015-0337 concerns Adobe Flash Player, affected on Windows, macOS, and Linux. It allows a remote cross-domain policy bypass via unspecified vectors, as described in Adobe’s APSB15-05 advisory. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on ...

CVE-2015-3092

CVE-2015-3092 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK/SDK & Compiler. The issue arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors (memory disclosure risk). Affected range includes Flash Player...

CVE-2015-3107

CVE-2015-3107 is a Use-After-Free vulnerability in Adobe Flash Player (and related AIR components) that can lead to arbitrary code execution via unspecified vectors. Affected products include Flash Player on Windows, macOS, and Linux, with versions before 13.0.0.292 and earlier 18.x before 18.0.0...

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.

CVE-2015-5547

Adobe Flash Player (and Adobe AIR) vulnerable to memory corruption via parsing a specially crafted SWF file, potentially enabling code execution. Affected: Flash Player before 18.0.0.232 (Windows/OS X) and before 11.2.202.508 (Linux); AIR before 18.0.0.199. Root cause: memory corruption from SWF ...

CVE-2015-5551

CVE-2015-5551 refers to a use-after-free vulnerability in Adobe Flash Player and related AIR components that enables remote code execution via unspecified vectors. Affected: Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199; AIR SDK before...

CVE-2015-5563

Technical details for CVE-2015-5563 are not publicly available in the provided documents. Monitor for updates from authoritative advisories; current files do not specify affected products/versions, root cause, impact, or fixes within this dataset.

CVE-2015-5571

CVE-2015-5571 affects Adobe Flash Player and AIR products. It arises from incomplete SWF format restrictions, enabling CSRF against JSONP endpoints via a crafted OBJECT element containing SWF content that meets the callback API’s character-set requirements. Affected: Flash Player on Windows/OS X ...

CVE-2015-7643

Technical details for CVE-2015-7643 are not publicly available in the provided documents. Monitor for updates and include only information that is present in the sources.

CVE-2015-8049

Technical details about CVE-2015-8049 are not provided in the connected documents. Monitor official advisories for updates; the supplied materials do not specify affected products/versions or fixes.