CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Image11::map function in libANGLE, used in Google Chrome before version 46.0.2490.71, mishandles mapping failures after device-lost events. This can lead to denial of service or other unspecified impacts.
A use-after-free vulnerability in the ServiceWorker implementation in Google Chrome before version 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.
The ContainerNode::parserInsertBefore function in Blink, used in Google Chrome before version 46.0.2490.71, proceeds with a DOM tree insertion in cases where a parent node no longer contains a child node. This allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, and in Adobe AIR before version 19.0.0.213, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a Video object with a crafted deblocking property.
Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.
Buffer overflow in Adobe Flash Player before version 18.0.0.252 and 19.x before version 19.0.0.207 on Windows and OS X and before version 11.2.202.535 on Linux, as well as in Adobe AIR before version 19.0.0.213, allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a TextLine object with a crafted validity property.
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before version 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property.
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR versions before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as Adobe AIR versions before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Adobe Reader and Acrobat in versions 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
In Adobe Reader and Acrobat versions 10.x before 10.1.16 and 11.x before 11.0.13, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, there is a vulnerability that allows attackers to bypass JavaScript API execution restrictions. This is a different vulnerability than those listed in CVE-2015-6707 to CVE-2015-6725 and CVE-2015-7614 to CVE-2015-7623.
A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as in Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X, allows attackers to execute arbitrary code.
A use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code.