CVE-2015-5547

Adobe Flash Player (and Adobe AIR) vulnerable to memory corruption via parsing a specially crafted SWF file, potentially enabling code execution. Affected: Flash Player before 18.0.0.232 (Windows/OS X) and before 11.2.202.508 (Linux); AIR before 18.0.0.199. Root cause: memory corruption from SWF ...

CVE-2015-5563

Technical details for CVE-2015-5563 are not publicly available in the provided documents. Monitor for updates from authoritative advisories; current files do not specify affected products/versions, root cause, impact, or fixes within this dataset.

CVE-2015-5571

CVE-2015-5571 affects Adobe Flash Player and AIR products. It arises from incomplete SWF format restrictions, enabling CSRF against JSONP endpoints via a crafted OBJECT element containing SWF content that meets the callback API’s character-set requirements. Affected: Flash Player on Windows/OS X ...

CVE-2015-8048

Technical details about CVE-2015-8048 are not publicly available in the provided documents. Monitor for updates and additional sources for affected products, impact, and remediation information.

CVE-2015-8060

Technical details for CVE-2015-8060 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8421

CVE-2015-8421 is a use-after-free vulnerability affecting Adobe Flash Player and related runtime components. Affected: Flash Player before 18.0.0.268 and 19.x and before 20.0.0.228 on Windows and macOS; Flash Player before 11.2.202.554 on Linux; Adobe AIR before 20.0.0.204, Adobe AIR SDK before 2...

CVE-2015-8426

Technical details about CVE-2015-8426 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories.

CVE-2016-0990

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-4141

CVE-2016-4141 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Microsoft Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. The connected documents provide concrete remediation activity: Mag...

CVE-2016-4271

Adobe Flash Player (Windows/macOS: prior to 18.0.0.375 and 19.x up to 23.x before 23.0.0.162; Linux: before 11.2.202.635) is associated with CVE-2016-4271, described as bypassing intended access restrictions and enabling information disclosure via unspecified vectors. Connected advisories show pa...

CVE-2016-4283

Technical details for CVE-2016-4283 are not publicly provided in the provided documents. Monitor for updates.

CVE-2016-6989

Technical details for CVE-2016-6989 are not publicly provided in the supplied documents; no validated affected products, vulnerable components, or remediation are described here. Monitor for updates in connected sources for concrete information.

CVE-2016-7879

CVE-2016-7879 affects Adobe Flash Player prior to 24.0.0.186 (Windows/Linux/macOS). It is an exploitable use-after-free in the NetConnection class when handling an attached script object, enabling arbitrary code execution. Affected versions include 23.0.0.207 and earlier, and 11.2.202.644 and ear...

CVE-2018-5001

CVE-2018-5001 describes an out-of-bounds read in Adobe Flash Player prior to version 30.0.0.113, leading to information disclosure. Connected advisories (Arch Linux ASA-201806-7, FreeBSD VUXML 2DDE5A56, CVE listings) confirm the vulnerability affects Flash Player before 30.0.0.113 and is mitigate...

CVE-2010-2175

Technical details about CVE-2010-2175 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2184

Technical details on CVE-2010-2184 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2011-0558

Adobe Flash Player contains a integer overflow vulnerability (CVE-2011-0558) in the ActionScript Function class that could allow remote code execution. Affected product: Flash Player prior to version 10.2.152.26. Root cause: overflow triggered by a large array length in Function-class code. Impac...

CVE-2011-0619

Summary: CVE-2011-0619 affects Adobe Flash Player prior to 10.3.181.14 (Windows/macOS/Linux/Solaris) and prior to 10.3.185.21 (Android). Root cause is memory corruption via unspecified vectors, enabling arbitrary code execution or a denial of service. Impact: arbitrary code execution or memory co...

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2013-0504

CVE-2013-0504 is a buffer overflow in Adobe Flash Player’s broker service that allows arbitrary code execution. Affected versions include Windows and Mac OS X builds prior to 10.3.183.67, and 11.x prior to 11.6.602.171 for Windows/Mac; and Linux builds prior to 11.2.202.273. Connected advisories ...

CVE-2014-0509

CVE-2014-0509 describes a cross-site scripting (XSS) vulnerability in Adobe Flash Player and Adobe AIR products prior to the listed versions. Affected: Flash Player on Windows/macOS (before 11.7.700.275 and 11.8.x–13.0.x before 13.0.0.182), Flash Player on Linux (before 11.2.202.350), and Adobe A...

CVE-2014-0564

CVE-2014-0564 affects Adobe Flash Player before 13.0.0.250, 14.x before 15.0.0.189 on Windows/macOS and before 11.2.202.411 on Linux, as well as Adobe AIR before 15.0.0.293 and related AIR SDKs, allowing arbitrary code execution or memory corruption via unspecified vectors (distinct from CVE-2014...

CVE-2014-0573

CVE-2014-0573 is a use-after-free in Adobe Flash Player that allows arbitrary code execution via unspecified vectors. Affected products include Windows/OS X Flash Player before 13.0.0.252 and 14.x before 15.0.0.223, Linux Flash Player before 11.2.202.418, and Adobe AIR before 15.0.0.356 (and AIR ...

CVE-2014-5333

Adobe Flash Player and AIR vulnerabilities (CVE-2014-5333) allow cross-site request forgery (CSRF) against JSONP endpoints via a crafted SWF in an OBJECT element, due to an incomplete fix for CVE-2014-4671. Affected versions include Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Win...

CVE-2015-3092

CVE-2015-3092 affects Adobe Flash Player (Windows/macOS/Linux) and Adobe AIR/SDK/SDK & Compiler. The issue arises from not properly restricting discovery of memory addresses, allowing an attacker to bypass ASLR via unspecified vectors (memory disclosure risk). Affected range includes Flash Player...

CVE-2015-3098

Adobe Flash Player and related AIR components are affected by a vulnerability (CVE-2015-3098) that could bypass the Same Origin Policy via unspecified vectors. Mageia MGASA-2015-0248 notes a fix in Flash Player 11.2.202.468 and links CVE-2015-3098 to this update. Affected versions include Windows...

CVE-2015-3117

Technical details for CVE-2015-3117 are not publicly available in the provided documents. No specifics on affected products, root cause, or impact are provided here. Monitor for updates.

CVE-2015-5564

CVE-2015-5564 is a use-after-free vulnerability in Adobe Flash Player that could allow arbitrary code execution. Affected products: Flash Player on Windows/OS X prior to 18.0.0.232 and Linux prior to 11.2.202.508; Adobe AIR prior to 18.0.0.199 and Adobe AIR SDK/Compiler prior to 18.0.0.199. The v...

CVE-2015-7647

CVE-2015-7647 affects Adobe Flash Player prior to 18.0.0.255 and 19.x prior to 19.0.0.226 on Windows/macOS, and prior to 11.2.202.540 on Linux. Root cause: a type confusion vulnerability (distinct from CVE-2015-7648) that allows arbitrary code execution. Public exploits exist (e.g., Exploit-DB en...

CVE-2015-8460

CVE-2015-8460 : Memory corruption in Adobe Flash Player (Windows OS X: affected before 18.0.0.324 and 19.x before 20.0.0.267; Linux before 11.2.202.559) and Adobe AIR/SDK prior to 20.0.0.233. Attacker-controlled vectors cause arbitrary code execution or a denial of service. The description lists ...

CVE-2015-8635

Technical details about CVE-2015-8635 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2015-8647

CVE-2015-8647 is a use-after-free vulnerability affecting Adobe Flash Player prior to 18.0.0.324 and 19.x prior to 20.0.0.267 on Windows and macOS, and prior to 11.2.202.559 on Linux; Adobe AIR before 20.0.0.233 (and AIR SDK before/SDK & Compiler 20.0.0.233) allows arbitrary code execution via un...

CVE-2016-0988

Technical details for CVE-2016-0988 are not publicly provided in the connected documents above; no concrete affected versions, vulnerable components, or remediation are present. Monitor for updates.

CVE-2016-0995

Technical details for CVE-2016-0995 are not publicly provided in the supplied documents; no affected products, vectors, or remediation are specified here. Monitor for updates.

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-4173

Technical details about CVE-2016-4173 are not provided in the supplied documents. No affected products, versions, or fixes are specified here. Monitor official disclosures for updates.

CVE-2016-4176

Adobe Flash Player has a memory corruption vulnerability (stack memory corruption) that could allow arbitrary code execution or a denial of service. Affected: Windows/macOS Flash Player before 18.0.0.366 and 19.x–22.x before 22.0.0.209; Linux before 11.2.202.632. Root cause/impact described in CV...

CVE-2016-6987

CVE-2016-6987 is a use-after-free vulnerability in Adobe Flash Player that allows remote code execution via unspecified vectors, with exploitation demonstrated by a remote attacker enticing a user to open a crafted SWF. Affected versions include Flash Player before 18.0.0.382 and 19.x through 23....

CVE-2018-4932

Summary: CVE-2018-4932 affects Adobe Flash Player and is a Use-After-Free vulnerability that could allow remote code execution in the user context. The issue impacts Flash Player versions 29.0.0.113 and earlier. Public advisories (APSB18-08) describe a fix in newer releases; updated versions incl...

CVE-2007-3456

CVE-2007-3456 affects Adobe Flash Player 9.0.45.0 and earlier, with an input-validation/overflow issue in parsing FLV/SWF data that could allow remote code execution via crafted files (large string or XML variable). The vulnerability arises from a signed comparison of values expected non-negative...

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610 are affected by CVE-2008-4546. The issue allows a remote web server to trigger a denial of service (NULL pointer dereference, browser crash) by returning a different response on a second HTTP request,...

CVE-2012-5251

CVE-2012-5251 is a buffer overflow vulnerability in Adobe Flash Player (Windows, Mac OS X, Linux) and Adobe AIR prior to the versions listed in the initial description, allowing attackers to execute arbitrary code via unspecified vectors. The connected sources confirm this CVE is among multiple F...

CVE-2014-0498

CVE-2014-0498: A stack-based buffer overflow in Adobe Flash Player (and related AIR components) allows arbitrary code execution via unspecified vectors. Affected products/versions (per the initial description): Flash Player before 11.7.700.269 and 11.8.x up to 12.0.x before 12.0.0.70 on Windows a...

CVE-2014-0533

CVE-2014-0533 is an XSS vulnerability in Adobe Flash Player (affecting Windows/OS X paths to 13.0.0.223 and 14.x before 14.0.0.125; Linux path to 11.2.202.378) and in Adobe AIR/SDK components before 14.0.0.110. The vulnerability, described as allowing remote attackers to inject arbitrary web scri...

CVE-2014-0581

CVE-2014-0581 is a memory‑corruption vulnerability in Adobe Flash Player caused by an error in parsing a specially crafted SWF file, reported across multiple advisories. The flaw can allow a remote attacker to corrupt memory, with potential for arbitrary code execution, as described by CPAI advis...

CVE-2015-0334

CVE-2015-0334 is a type confusion vulnerability in Adobe Flash Player’s NetConnection handling that allowed remote code execution. Affected are Windows/OS X Flash Player builds before 13.0.0.277 and 14.x through 17.x before 17.0.0.134, and Linux before 11.2.202.451. The issue enables arbitrary co...

CVE-2015-3096

CVE-2015-3096 relates to Adobe Flash Player and related AIR components; connected sources indicate a CSRF issue linked to an incomplete fix for CVE-2014-5333, enabling CSRF via crafted SWF/OBJECT content and potentially bypassing protections. Details about affected versions are provided in adviso...

CVE-2015-3137

CVE-2015-3137 is a use-after-free in Adobe Flash Player (Windows/macOS: affected versions include <13.0.0.302 and 14.x–18.x <18.0.0.203; Linux: <11.2.202.481) and related AIR components (

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.