CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element.
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
Buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as in Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before version 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code.
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A stack-based buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code.
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code.
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through stack memory corruption. The issue affects versions before 18.0.0.241 for Flash Player and before 19.0.0.190 for Adobe AIR.
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.241 for Flash Player and before 19.0.0.190 for Adobe AIR.
Adobe Flash Player versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as Adobe AIR and its SDK before version 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as Adobe AIR versions before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before 11.2.202.521 on Linux, and in Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.