CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before version 11.2.202.548 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 19.0.0.241, allowing attackers to execute arbitrary code.
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted loadSound call.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
Adobe Flash Player versions before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.241, allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via a crafted getBounds call.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted setMask arguments.
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion' in the NetConnection object implementation.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionInstanceOf arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionCallMethod arguments.
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionImplementsOp arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionExtends arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted attachSound arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted globalToLocal arguments.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted gridFitType property value.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted DefineFunction atoms.
The Adobe Type Manager Library in Windows allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Windows Graphics Memory Remote Code Execution Vulnerability'.
The Adobe Type Manager Library in Windows allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Windows Graphics Memory Remote Code Execution Vulnerability'.