CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Use-after-free vulnerability in the instanceof function in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 20.0.0.260.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. A similar vulnerability exists in Adobe AIR before version 20.0.0.260 and in Adobe AIR SDK and Compiler before the same version.
A use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before version 18.0.0.329 and in 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux, and in Adobe AIR before 20.0.0.260, allows attackers to execute arbitrary code.
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A heap-based buffer overflow in Adobe Flash Player before version 18.0.0.329 and 19.x and 20.x before version 20.0.0.306 on Windows and OS X, and before version 11.2.202.569 on Linux, as well as in Adobe AIR before version 20.0.0.260, allows attackers to execute arbitrary code.
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player and Adobe AIR in certain versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.329 for Flash Player and before 20.0.0.260 for Adobe AIR.
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The issue affects versions before 18.0.0.329 for Flash Player and before 20.0.0.260 for Adobe AIR.
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player before version 18.0.0.329 and versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects various software versions on Windows, OS X, and Linux.
Adobe Experience Manager versions 5.6.1, 6.0.0, and 6.1.0 may allow remote attackers to have an unspecified impact via a crafted serialized Java object.
Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, allowing remote attackers to bypass dispatcher rules.
The Servlets Post component 2.3.6 in Apache Sling, used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-0948 is a CSRF vulnerability in Adobe Connect before version 9.5.2 that allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
Microsoft Internet Explorer versions 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a memory corruption vulnerability in Internet Explorer.
Microsoft Internet Explorer 9 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, known as 'Internet Explorer Memory Corruption Vulnerability.'