Flash Player (Adobe) - vulnerabilities (CVEs)

1084 CVEs, 0 in the last 30 days, 636 known versions, newest CVE from 2020-10-14. Vendor: Adobe.

CVEs of Flash Player

CVE-2020-9746 - CVSS 8.8 (high), 2020-10-14: Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and…
CVE-2020-9633 - CVSS 9.8 (critical), 2020-06-12: Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft…
CVE-2020-3757 - CVSS 8.8 (high), 2020-02-13: Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion…
CVE-2019-8075 - CVSS 7.5 (high), 2019-09-27: Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information…
CVE-2019-8069 - CVSS 9.8 (critical), 2019-09-12: Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Same Origin Method Execution vulnerability. Successful exploitation…
CVE-2019-8070 - CVSS 9.8 (critical), 2019-09-12: Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploitation could lead to…
CVE-2019-7845 - CVSS 8.8 (high), 2019-06-12: Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful…
CVE-2019-7090 - CVSS 6.5 (medium), 2019-05-24: Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft…
CVE-2019-7108 - CVSS 7.5 (high), 2019-05-23: Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful…
CVE-2019-7096 - CVSS 9.8 (critical), 2019-05-23: Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful…
CVE-2019-7837 - CVSS 8.8 (high), 2019-05-22: Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful…
CVE-2018-15983 - CVSS 7.8 (high), 2019-01-18: Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful…
CVE-2018-15982 - CVSS 7.8 (high), 2019-01-18: Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary…
CVE-2018-15981 - CVSS 9.8 (critical), 2018-11-29: Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-15978 - CVSS 7.5 (high), 2018-11-29: Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-15967 - CVSS 7.5 (high), 2018-09-25: Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-12825 - CVSS 9.8 (critical), 2018-08-29: Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
CVE-2018-12828 - CVSS 9.8 (critical), 2018-08-29: Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to…
CVE-2018-12827 - CVSS 7.5 (high), 2018-08-29: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-12826 - CVSS 7.5 (high), 2018-08-29: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-12824 - CVSS 5.9 (medium), 2018-08-29: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-5008 - CVSS 7.5 (high), 2018-07-20: Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-5007 - CVSS 8.8 (high), 2018-07-20: Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the…
CVE-2018-5002 - CVSS 7.8 (high), 2018-07-09: Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-5001 - CVSS 6.5 (medium), 2018-07-09: Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-5000 - CVSS 6.5 (medium), 2018-07-09: Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-4945 - CVSS 8.8 (high), 2018-07-09: Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the…
CVE-2018-4933 - CVSS 6.5 (medium), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information…
CVE-2018-4936 - CVSS 6.5 (medium), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Heap Overflow vulnerability. Successful exploitation could lead to information…
CVE-2018-4932 - CVSS 8.8 (high), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable Use-After-Free vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4935 - CVSS 8.8 (high), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4944 - CVSS 9.8 (critical), 2018-05-19: Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4934 - CVSS 6.5 (medium), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information…
CVE-2018-4937 - CVSS 8.8 (high), 2018-05-19: Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4919 - CVSS 8.8 (high), 2018-05-19: Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4920 - CVSS 8.8 (high), 2018-05-19: Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2018-4878 - CVSS 7.8 (high), 2018-02-06: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime…
CVE-2018-4877 - CVSS 9.8 (critical), 2018-02-06: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime…
CVE-2018-4871 - CVSS 7.5 (high), 2018-01-09: An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data that is…
CVE-2017-11305 - CVSS 6.5 (medium), 2017-12-13: A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a…
CVE-2017-3114 - CVSS 9.8 (critical), 2017-12-09: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is…
CVE-2017-3112 - CVSS 9.8 (critical), 2017-12-09: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is…
CVE-2017-11225 - CVSS 9.8 (critical), 2017-12-09: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the…
CVE-2017-11215 - CVSS 9.8 (critical), 2017-12-09: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the…
CVE-2017-11213 - CVSS 9.8 (critical), 2017-12-09: An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is…
CVE-2017-11282 - CVSS 9.8 (critical), 2017-12-01: Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution.…
CVE-2017-11281 - CVSS 9.8 (critical), 2017-12-01: Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code…
CVE-2017-11292 - CVSS 8.8 (high), 2017-10-22: Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the…
CVE-2017-3106 - CVSS 8.8 (high), 2017-08-11: Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead…
CVE-2017-3085 - CVSS 7.4 (high), 2017-08-11: Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.
CVE-2017-3099 - CVSS 8.8 (high), 2017-07-17: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful…
CVE-2017-3080 - CVSS 6.5 (medium), 2017-07-17: Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful…
CVE-2017-3100 - CVSS 6.5 (medium), 2017-07-17: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful…
CVE-2016-0959 - CVSS 9.8 (critical), 2017-06-27: Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe…
CVE-2017-3076 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could…
CVE-2017-3079 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data.…
CVE-2017-3083 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile…
CVE-2017-3075 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class.…
CVE-2017-3078 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful…
CVE-2017-3082 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could…
CVE-2017-3077 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could…
CVE-2017-3081 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display…
CVE-2017-3084 - CVSS 9.8 (critical), 2017-06-20: Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful…
CVE-2017-3070 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation…
CVE-2017-3073 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects,…
CVE-2017-3069 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could…
CVE-2017-3072 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could…
CVE-2017-3068 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful…
CVE-2017-3071 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation…
CVE-2017-3074 - CVSS 8.8 (high), 2017-05-09: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could…
CVE-2017-3060 - CVSS 9.8 (critical), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful…
CVE-2017-3063 - CVSS 9.8 (critical), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful…
CVE-2017-3059 - CVSS 9.8 (critical), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation…
CVE-2017-3062 - CVSS 9.8 (critical), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property.…
CVE-2017-3058 - CVSS 7.8 (high), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. Successful exploitation could lead to…
CVE-2017-3061 - CVSS 9.8 (critical), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead…
CVE-2017-3064 - CVSS 7.8 (high), 2017-04-12: Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation…
CVE-2017-2997 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports…
CVE-2017-3000 - CVSS 6.5 (medium), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation…
CVE-2017-3003 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user…
CVE-2017-2999 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting…
CVE-2017-3002 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the…
CVE-2017-2998 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to…
CVE-2017-3001 - CVSS 8.8 (high), 2017-03-14: Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM.…
CVE-2017-2982 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful…
CVE-2017-2986 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation…
CVE-2017-2990 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful…
CVE-2017-2993 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers. Successful exploitation could…
CVE-2017-2996 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK. Successful exploitation could lead to…
CVE-2017-2985 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful…
CVE-2017-2988 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful…
CVE-2017-2992 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could…
CVE-2017-2995 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful…
CVE-2017-2984 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could…
CVE-2017-2987 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation…
CVE-2017-2991 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression).…
CVE-2017-2994 - CVSS 8.8 (high), 2017-02-15: Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch. Successful exploitation…
CVE-2017-2936 - CVSS 8.8 (high), 2017-01-11: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful…
CVE-2017-2925 - CVSS 8.8 (high), 2017-01-11: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could…
CVE-2017-2928 - CVSS 8.8 (high), 2017-01-11: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to setting visual mode effects. Successful…