Adobe Flash Player vulnerabilities

323 known CVE vulnerabilities in Adobe Flash Player, translated and rated.

CVE-2016-7875High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7874High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7873High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7872High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple presentation levels. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7871High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7870High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7869High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow/underflow vulnerability in the RegExp class related to backtrack search functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7868High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow/underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7867High
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7865High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7864High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have a use-after-free vulnerability that can be exploited by an attacker. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7863High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7862High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7861High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7860High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability.
CVE-2016-7859High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7858High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7857High
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-6992High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2016-6990High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6989High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6987High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6986High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6985High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6984High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6983High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6982High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6981High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.382 and 19.x through 23.x before version 23.0.0.185 on Windows and OS X and before version 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-4286High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to bypass intended access restrictions via unspecified vectors.
CVE-2016-4273High
Adobe Flash Player versions before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-7020High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.366 and 19.x through 22.x before version 22.0.0.209 on Windows and OS X and before version 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6932High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6931High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6930High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6929High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and in versions 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6927High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6926High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6925High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and in versions 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6924High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6923High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-6922High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-6921High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-4287High
Integer overflow in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-4285High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
CVE-2016-4284High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4283High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4282High
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contains a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4281High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4280High
Adobe Flash Player versions before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4279High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.375 and 19.x through 23.x before version 23.0.0.162 on Windows and OS X and before version 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.