Veille CVE

Recherche « adobe flash_player »

8 CVE

Critique 3 Élevée 5 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « adobe flash_player » ✕
  1. CVE-2017-11292 8.8 Élevée Exploitée

    Adobe Flash Player version 27.0.0.159 and earlier · Adobe flash player desktop runtime · Adobe flash player · Redhat enterprise linux desktop

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

  2. CVE-2016-4117 9.8 Critique Exploitée Rançongiciel

    Adobe flash player · Redhat enterprise linux desktop · Redhat enterprise linux server · Redhat enterprise linux server from rhui

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

  3. CVE-2016-1019 9.8 Critique Exploitée Rançongiciel

    Adobe flash player desktop runtime · Adobe flash player · Adobe air desktop runtime · Adobe air sdk

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

  4. CVE-2016-1010 8.8 Élevée Exploitée

    Adobe flash player · Adobe air · Adobe air sdk · Samsung x14j firmware

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.

  5. CVE-2015-0310 7.8 Élevée Exploitée

    Adobe flash player

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

  6. CVE-2014-0502 8.8 Élevée Exploitée

    adobe flash_player · adobe air · adobe air_sdk · Adobe flash player

    Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

  7. CVE-2014-0497 9.8 Critique Exploitée

    adobe flash_player · Adobe flash player · Google chrome · Redhat enterprise linux desktop

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

  8. CVE-2012-1535 7.8 Élevée Exploitée

    Adobe flash player · Redhat enterprise linux desktop · Redhat enterprise linux server · Redhat enterprise linux workstation

    Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.