CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Integer overflow in the Shader filter implementation in Adobe Flash Player before version 18.0.0.268 and 19.x and 20.x before version 20.0.0.228 on Windows and OS X and before version 11.2.202.554 on Linux, as well as in Adobe AIR before version 20.0.0.204, Adobe AIR SDK before version 20.0.0.204, and Adobe AIR SDK & Compiler before version 20.0.0.204, allows attackers to execute arbitrary code via a large BitmapData source object.
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This affects versions before 18.0.0.268 for Flash Player and before 20.0.0.204 for Adobe AIR.
A use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before version 18.0.0.268 and in 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via a crafted filters property value.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player and Adobe AIR before specified versions allow attackers to bypass intended access restrictions via unspecified vectors. This is a different vulnerability than CVE-2015-8409 and CVE-2015-8453.
The SharedObject object implementation in Adobe Flash Player before version 18.0.0.268 and 19.x and 20.x before version 20.0.0.228 on Windows and OS X, as well as before version 11.2.202.554 on Linux, and Adobe AIR before version 20.0.0.204, allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion' during a getRemote call.
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, allows attackers to execute arbitrary code via a crafted XML object mishandled during a toString call.
A use-after-free vulnerability in the Selection object in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux. It allows attackers to execute arbitrary code via a crafted setFocus call.
A use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before version 18.0.0.268 and in 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via crafted addPage arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before version 11.2.202.554 on Linux. It allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux. It allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, allows attackers to execute arbitrary code.