Adobe Flash Player vulnerabilities

323 known CVE vulnerabilities in Adobe Flash Player, translated and rated.

CVE-2015-0353High
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0352High
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0351High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.281 and 14.x through 17.x before version 17.0.0.169 on Windows and OS X and before version 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0350High
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0349High
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0348High
Buffer overflow in Adobe Flash Player before version 13.0.0.281 and 14.x through 17.x before version 17.0.0.169 on Windows and OS X and before version 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0347High
Adobe Flash Player versions before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0346High
A double free vulnerability in Adobe Flash Player before version 13.0.0.281 and 14.x through 17.x before version 17.0.0.169 on Windows and OS X and before version 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0342High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.277 and 14.x through 17.x before version 17.0.0.134 on Windows and OS X and before version 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0341High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.277 and in versions 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0339High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0338High
Integer overflow in Adobe Flash Player before version 13.0.0.277 and 14.x through 17.x before version 17.0.0.134 on Windows and OS X and before version 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0336High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-0335High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0334High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-0333High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0332High
Adobe Flash Player versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0331High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.269 and 14.x through 16.x before version 16.0.0.305 on Windows and OS X and before version 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0330High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0329High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0328High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors.
CVE-2015-0327High
A heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0326High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors.
CVE-2015-0325High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors.
CVE-2015-0324High
Buffer overflow in Adobe Flash Player before version 13.0.0.269 and 14.x through 16.x before version 16.0.0.305 on Windows and OS X and before version 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0323High
A heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code.
CVE-2015-0322High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.269 and 14.x through 16.x before version 16.0.0.305 on Windows and OS X and before version 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0321High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0320High
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0319High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-0318High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0317High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-0316High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0315High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.269 and 14.x through 16.x before version 16.0.0.305 on Windows and OS X and before version 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-0314High
Adobe Flash Player versions before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-0312High
A double free vulnerability exists in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux. It allows attackers to execute arbitrary code via unspecified vectors.
CVE-2014-9164High
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2014-9162High
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow attackers to obtain sensitive information via unspecified vectors.
CVE-2014-8443High
A use-after-free vulnerability exists in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux. Attackers can exploit this vulnerability to execute arbitrary code.
CVE-2014-0587High
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2014-0580High
Adobe Flash Player versions before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVE-2014-0515High
Buffer overflow in Adobe Flash Player before version 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-0510High
A heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors.
CVE-2018-15982HighActively exploited
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2017-3114Critical
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions related to reading data past the end of the target buffer. The use of an invalid pointer during access to internal data structure fields causes this vulnerability.
CVE-2017-3112Critical
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions related to reading data past the end of the target buffer. The use of an invalid pointer during access to internal data structure fields causes this vulnerability.
CVE-2017-11225Critical
A use after free vulnerability was discovered in Adobe Flash Player 27.0.0.183 and earlier versions in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access, potentially leading to code corruption, control-flow hijack, or an information leak attack.
CVE-2017-11215Critical
A use after free vulnerability was discovered in Adobe Flash Player 27.0.0.183 and earlier versions in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access, potentially leading to code corruption, control-flow hijack, or an information leak attack.
CVE-2017-11213Critical
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions related to an integer overflow that leads to reading data past the end of the target buffer. The use of an invalid pointer during access to internal data structure fields causes this vulnerability.
CVE-2017-11282Critical
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution.