CVE-2016-6927

Technical details for CVE-2016-6927 are not publicly available in the provided documents. Connected EUVD entries mention malware but do not describe the vulnerability. Monitor for updates.

CVE-2016-6992

Adobe Flash Player vulnerability CVE-2016-6992 is a type confusion flaw that could allow remote code execution. Affected products include Flash Player on Windows, macOS (before 18.0.0.382 and 19.x–23.x before 23.0.0.185) and Linux (before 11.2.202.637). Connected advisories indicate fixes were re...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-2216

CVE-2010-2216 affects Adobe Flash Player prior to 9.0.280 and 10.x prior to 10.1.82.76, and Adobe AIR prior to 2.0.3. The description states that attackers can execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, and this is a distinct issue from CVE-20...

CVE-2014-0578

CVE-2014-0578 affects Adobe Flash Player prior to 13.0.0.302 and 14.x up to 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux, plus Adobe AIR before 18.0.0.180 and related SDKs. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vecto...

CVE-2015-3131

Adobe Flash Player and AIR products are affected by a use-after-free vulnerability (CVE-2015-3131) that could allow arbitrary code execution. Affected ranges include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux; Adobe AIR...

CVE-2015-3136

CVE-2015-3136 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components that allows arbitrary code execution via unspecified vectors. The flaw affects Flash Player before 13.0.0.302 and 14.x–18.x before 18.0.0.203, with AIR/AIR SDK before 18.0.0.180...

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.

CVE-2015-5117

Technical details for CVE-2015-5117 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-5545

Technical details for CVE-2015-5545 are not publicly provided in the connected documents. Monitor for updates to affected products, impact, and remediation.

CVE-2015-5558

CVE-2015-5558 affects Adobe Flash Player prior to 18.0.0.232 on Windows/OS X and prior to 11.2.202.508 on Linux, and Adobe AIR before 18.0.0.199 (including AIR SDK/Compiler before 18.0.0.199). The underlying issue is a type confusion that enables arbitrary code execution when handling SWF content...

CVE-2015-5560

An integer overflow vulnerability exists in Adobe Flash Player , Adobe AIR , and Adobe AIR SDK/Compiler . The flaw occurs during the decoding of ID3 tags in MP3 files when the compressed data exceeds 0x2aaaaaaa bytes, leading to an incorrect buffer size calculation and a subsequent heap buffer ov...

CVE-2015-5571

CVE-2015-5571 affects Adobe Flash Player and AIR products. It arises from incomplete SWF format restrictions, enabling CSRF against JSONP endpoints via a crafted OBJECT element containing SWF content that meets the callback API’s character-set requirements. Affected: Flash Player on Windows/OS X ...

CVE-2015-6676

CVE-2015-6676 is a buffer overflow vulnerability in Adobe Flash Player and related AIR components. Affected: Flash Player on Windows/macOS prior to 18.0.0.241 and 19.x prior to 19.0.0.185, Linux prior to 11.2.202.521; AIR before 19.0.0.190 and AIR SDK/Compiler before 19.0.0.190. Description notes...

CVE-2015-7628

Adobe Flash Player and related AIR components contain a Same Origin Policy bypass vulnerability (CVE-2015-7628) that could lead to information disclosure. Affected products include Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/macOS, and before 11.2.202.535 on Linux, plus A...

CVE-2015-7643

Technical details for CVE-2015-7643 are not publicly available in the provided documents. Monitor for updates and include only information that is present in the sources.

CVE-2015-8058

Technical details for CVE-2015-8058 are not publicly provided in the supplied documents. No concrete impact, exploit, or remediation details are present. Monitor for updates from official advisories.

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8436

Technical details about CVE-2015-8436 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current connected EUVD entries mention malware but do not describe vulnerabilities.

CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2016-0964

Technical details about CVE-2016-0964 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-0990

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2016-4132

CVE-2016-4132 corresponds to an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries in IE10/IE11 and Edge, with unknown impact in the initial entry but later connected advisories list multiple memory corruption/code-execution related CVEs. Connected...

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...

CVE-2016-4182

Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.

CVE-2016-4230

CVE-2016-4230 describes a use-after-free in Adobe Flash Player affecting Windows, OS X, and Linux across multiple version ranges (before 18.0.0.366 and 19.x–22.x before 22.0.0.209 on Windows/OS X; before 11.2.202.632 on Linux). The vulnerability allows arbitrary code execution via unspecified vec...

CVE-2016-4275

Technical details for CVE-2016-4275 are not publicly provided in the supplied documents. Monitor official advisories for updates; EUVD entries reference malware but do not describe exploit vectors or affected products.

CVE-2016-7870

CVE-2016-7870 affects Adobe Flash Player versions 23.0.0.207 and earlier (Windows, Linux, etc.) with a buffer overflow/underflow in the RegExp class used for specific search strategies. Successful exploitation could lead to arbitrary code execution. Mitigation: upgrade to Flash Player 24.0.0.186 ...

CVE-2017-2938

Adobe Flash Player 24.x vulnerable: CVE-2017-2938 is a security bypass in the handling of TCP connections affecting Flash Player versions up to 24.0.0.186. Remediation per connected documents is upgrading to the patched build (24.0.0.194 or later) as part of APSB17-02/openSUSE update openSUSE-201...

CVE-2017-2985

CVE-2017-2985 is a use-after-free vulnerability in Adobe Flash Player’s ActionScript 3 BitmapData class affecting Flash Player versions earlier than 24.0.0.221. The underlying issue allows remote code execution, with public exploit activity noted (e.g., Exploit-DB reference). Remediation: update ...

CVE-2017-3001

CVE-2017-3001 is a use-after-free vulnerability in Adobe Flash Player up to version 24.0.0.221 related to garbage collection in the ActionScript 2 VM. The issue could allow remote code execution if exploited. Affected: Flash Player

CVE-2008-5361

Adobe Flash Player and Adobe AIR are affected by CVE-2008-5361. The vulnerability arises because the ActionScript 2 VM does not verify a member element’s size when performing DefineConstantPool, ActionJump, ActionPush, and ActionTry (and related actions), enabling a remote attacker to read sensit...

CVE-2010-0187

CVE-2010-0187 affects Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130, allowing remote attackers to cause an application crash (DoS) via a modified SWF file. Connected advisories indicate updates to Flash Player (e.g., upgrade to 10.0.45.2) mitigate the issue (RHSA-2010-0102; ...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...

CVE-2014-0584

CVE-2014-0584 is a type-confusion vulnerability in Adobe Flash Player/SWF handling that enables remote code execution. Affected products include Flash Player on Windows, macOS, Linux (before 11.2.202.418) and Adobe AIR SDK/SDK & Compiler (before 15.0.0.356); OpenSUSE and other advisories referenc...

CVE-2014-5333

Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...

CVE-2015-0334

CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...

CVE-2015-3093

CVE-2015-3093 is a memory‑corruption vulnerability in Adobe Flash Player (and related AIR components) triggered by parsing SWF content. Affects Windows/macOS/Linux; vulnerable versions include Flash Player before 13.0.0.289 and 14.x–17.x before 17.0.0.188 on Windows/macOS and before 11.2.202.460 ...

CVE-2015-8647

CVE-2015-8647 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.324 and 19.x prior to 20.0.0.267 on Windows and macOS, and prior to 11.2.202.559 on Linux; Adobe AIR before 20.0.0.233 (and AIR SDK before/SDK & Compiler 20.0.0.233) allows arbitrary code execution via un...

CVE-2016-1000

Technical details about CVE-2016-1000 are not publicly provided in the supplied documents; no vendor, affected products, or remediation details are present. Monitor for updates.

CVE-2016-1005

CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...

CVE-2016-1099

CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-4121

Adobe Flash Player contains a use-after-free vulnerability (CVE-2016-4121) affecting Windows and OS X up to 18.0.0.352, and 19.x–21.x up to 21.0.0.242, and Linux up to 11.2.202.621. The issue allows an attacker to execute arbitrary code via unspecified vectors. Affected versions include Flash Pla...

CVE-2016-4123

CVE-2016-4123 is part of the Adobe Flash Player vulnerabilities addressed in the APSB16-18 update. The connected sources show multiple Linux distribution advisories (openSUSE, SUSE, Alt Linux, Arch Linux) referencing CVE-2016-4123 among others and noting a security fix via Flash Player update to ...

CVE-2016-4142

CVE-2016-4142 is a use-after-free vulnerability in Adobe Flash Player (as used in Flash libraries for Internet Explorer 10/11 and Microsoft Edge) that can lead to remote code execution via specially crafted SWF content. The initial entry notes Flash Player 21.0.0.242 and earlier as affected. Conn...