CVE-2014-0533

CVE-2014-0533 is an XSS vulnerability in Adobe Flash Player (affecting Windows/OS X paths to 13.0.0.223 and 14.x before 14.0.0.125; Linux path to 11.2.202.378) and in Adobe AIR/SDK components before 14.0.0.110. The vulnerability, described as allowing remote attackers to inject arbitrary web scri...

CVE-2015-0316

Technical details (affected product/version, root cause, impact, or fix) for CVE-2015-0316 are not provided in the connected documents. Monitor for updates.

CVE-2015-0337

CVE-2015-0337 concerns Adobe Flash Player, affected on Windows, macOS, and Linux. It allows a remote cross-domain policy bypass via unspecified vectors, as described in Adobe’s APSB15-05 advisory. Affected versions include Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on ...

CVE-2015-0341

Adobe Flash Player is affected by CVE-2015-0341, a use-after-free in handling nested objects in SWF files that enables remote code execution. Exploitation is described as requiring a user to open a specially crafted SWF; the vulnerability can execute arbitrary code in the context of the user. Aff...

CVE-2015-3136

CVE-2015-3136 is a use-after-free vulnerability in Adobe Flash Player (Windows, OS X, Linux) and related AIR components that allows arbitrary code execution via unspecified vectors. The flaw affects Flash Player before 13.0.0.302 and 14.x–18.x before 18.0.0.203, with AIR/AIR SDK before 18.0.0.180...

CVE-2015-5547

Adobe Flash Player (and Adobe AIR) vulnerable to memory corruption via parsing a specially crafted SWF file, potentially enabling code execution. Affected: Flash Player before 18.0.0.232 (Windows/OS X) and before 11.2.202.508 (Linux); AIR before 18.0.0.199. Root cause: memory corruption from SWF ...

CVE-2015-5563

Technical details for CVE-2015-5563 are not publicly available in the provided documents. Monitor for updates from authoritative advisories; current files do not specify affected products/versions, root cause, impact, or fixes within this dataset.

CVE-2015-5567

CVE-2015-5567 describes a stack memory corruption vulnerability in Adobe Flash Player and Adobe AIR that could allow remote code execution or a denial of service. Affected software and versions (as stated): Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows/OS X; Flash on Linux ...

CVE-2015-5571

CVE-2015-5571 affects Adobe Flash Player and AIR products. It arises from incomplete SWF format restrictions, enabling CSRF against JSONP endpoints via a crafted OBJECT element containing SWF content that meets the callback API’s character-set requirements. Affected: Flash Player on Windows/OS X ...

CVE-2015-7647

CVE-2015-7647 affects Adobe Flash Player prior to 18.0.0.255 and 19.x prior to 19.0.0.226 on Windows/macOS, and prior to 11.2.202.540 on Linux. Root cause: a type confusion vulnerability (distinct from CVE-2015-7648) that allows arbitrary code execution. Public exploits exist (e.g., Exploit-DB en...

CVE-2015-8426

Technical details about CVE-2015-8426 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories.

CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2016-1000

Technical details about CVE-2016-1000 are not publicly provided in the supplied documents; no vendor, affected products, or remediation details are present. Monitor for updates.

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-4141

CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...

CVE-2016-4173

Technical details about CVE-2016-4173 are not provided in the supplied documents. No affected products, versions, or fixes are specified here. Monitor official disclosures for updates.

CVE-2016-4176

Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2011-2134

CVE-2011-2134 is a buffer overflow in Adobe Flash Player (Windows/macOS/Linux/Solaris) and Adobe AIR that could allow arbitrary code execution via unspecified vectors. Affected products are Flash Player prior to 10.3.183.5 (and prior to 10.3.186.3 on Android) and AIR prior to 2.7.1.1961. Remediat...

CVE-2014-0553

CVE-2014-0553 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. It affects Flash Player before 13.0.0.244 and 14.x before 15.0.0.152 on Windows and OS X, and before 11.2.202.406 on Linux; also affects Adobe AIR before 15.0.0.249 (Windows/OS X). Ado...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-3137

CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (

CVE-2015-5551

CVE-2015-5551 refers to a use-after-free vulnerability in Adobe Flash Player and related AIR components that enables remote code execution via unspecified vectors. Affected: Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199; AIR SDK before...

CVE-2015-5560

Adobe Flash Player and related AIR components suffer an integer overflow in decoding ID3/other data that can lead to arbitrary code execution. Affected products include Flash Player before 18.0.0.232 on Windows/macOS and before 11.2.202.508 on Linux, plus Adobe AIR before 18.0.0.199 (and AIR SDK/...

CVE-2015-7628

Adobe Flash Player and related AIR components contain a Same Origin Policy bypass vulnerability (CVE-2015-7628) that could lead to information disclosure. Affected products include Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows/macOS, and before 11.2.202.535 on Linux, plus A...

CVE-2015-8046

Technical details about CVE-2015-8046 are not publicly available in the provided connected documents. Monitor for updates; no concrete vendor/version/impact information is supplied here.

CVE-2015-8058

Technical details for CVE-2015-8058 are not publicly provided in the supplied documents. No concrete impact, exploit, or remediation details are present. Monitor for updates from official advisories.

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8643

Technical details about CVE-2015-8643 are not publicly available in the provided connected documents. Monitor for updates and additional disclosures to determine affected products, root cause, and remediation.

CVE-2016-0988

Technical details for CVE-2016-0988 are not publicly provided in the connected documents above; no concrete affected versions, vulnerable components, or remediation are present. Monitor for updates.

CVE-2016-1005

CVE-2016-1005 affects Adobe Flash Player (Windows/OS X: before 21.0.0.182; Linux: before 11.2.202.577) and Adobe AIR/AIR SDK/SDK Compiler (before 21.0.0.176). The vulnerability allows attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data due to an uninitialized ...

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2016-4172

Technical details about CVE-2016-4172 are not publicly available in the provided connected documents. Monitor for official advisories for affected products, versions, and fixes.

CVE-2016-6921

Adobe Flash Player contains a use-after-free vulnerability rated HIGH, affecting Windows/OS X builds before 18.0.0.375 and 19.x–23.x before 23.0.0.162, and Linux before 11.2.202.635. The issue allows arbitrary code execution via unspecified vectors and is a separate vulnerability from CVE-2016-42...

CVE-2016-6922

Technical details for CVE-2016-6922 are not publicly available in the provided connected documents. Monitor the EUVD entries and other sources for updates; no specific affected products, impact, or remediation are provided here.

CVE-2016-6932

Technical details about CVE-2016-6932 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-6981

CVE-2016-6981 is a use-after-free vulnerability in Adobe Flash Player affecting Windows, OS X, and Linux prior to the stated fixed versions. The vulnerability could allow arbitrary code execution via unspecified vectors and is described as a remote code execution issue. Public notes in connected ...

CVE-2016-6982

Technical details for CVE-2016-6982 are not present in the provided documents; connected EUVD and CNVD entries reference Flash but do not specify the affected component or root cause for this CVE. Monitor for updates.

CVE-2017-2987

CVE-2017-2987 affects Adobe Flash Player up to version 24.0.0.194, with an exploitable integer overflow in the Flash Broker COM component that can lead to arbitrary code execution. Public advisories and Nessus/Gentoo/SUSE entries corroborate widespread remediation, typically by upgrading Flash Pl...

CVE-2017-2996

CVE-2017-2996 affects Adobe Flash Player (and Primetime SDK integration) with a memory corruption vulnerability in Flash Player versions 24.0.0.194 and earlier. The issue can lead to arbitrary code execution on a remote system when processing crafted SWF content. The connected advisories confirm ...

CVE-2018-5008

CVE-2018-5008 is an Adobe Flash Player out-of-bounds read vulnerability reported in Flash Player 30.0.0.113 and earlier. Connected sources confirm it enables information disclosure and is part of APSB18-24 alongside CVE-2018-5007 (arbitrary code execution). Public details specify affected compone...

CVE-2010-2213

CVE-2010-2213 describes a vulnerability in Adobe Flash Player (before 9.0.280 and 10.x before 10.1.82.76) and Adobe AIR before 2.0.3 , enabling attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is confirmed across connected...

CVE-2011-2137

CVE-2011-2137: A buffer overflow in Adobe Flash Player allows arbitrary code execution via unspecified vectors. Affected are Flash Player before 10.3.183.5 on Windows, macOS, Linux, and Solaris; Flash Player before 10.3.186.3 on Android; and Adobe AIR before 2.7.1 on Windows/macOS and before 2.7....

CVE-2011-2414

CVE-2011-2414: Buffer overflow in Adobe Flash Player (pre-10.3.183.5 Windows/Mac/Linux/Solaris; pre-10.3.186.3 Android) and Adobe AIR (pre-2.7.1) allowing arbitrary code execution via unspecified vectors. Public references link to Adobe APSB11-21; openSUSE/SUSE patches (flash-player-4976) address...

CVE-2013-0504

CVE-2013-0504 is a buffer overflow in Adobe Flash Player’s broker service that allows arbitrary code execution. Affected versions include Windows and Mac OS X builds prior to 10.3.183.67, and 11.x prior to 11.6.602.171 for Windows/Mac; and Linux builds prior to 11.2.202.273. Connected advisories ...

CVE-2013-1378

CVE-2013-1378 affects Adobe Flash Player prior to 10.3.183.75/11.x before 11.7.700.169 on Windows and macOS, prior to 10.3.183.75/11.x before 11.2.202.280 on Linux, prior to 11.1.111.50 on Android 2.x/3.x, and prior to 11.1.115.54 on Android 4.x; and Adobe AIR before 3.7.0.1530 (and AIR SDK & Com...

CVE-2014-0532

CVE-2014-0532 is an XSS vulnerability in Adobe Flash Player and the Flash/AIR components, allowing remote script injection via unspecified vectors. Affected: Windows and OS X Flash Player prior to 13.0.0.223, and Flash Player 14.x prior to 14.0.0.125; Linux Flash Player prior to 11.2.202.378; Ado...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-5333

Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...