CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Flash Player Remote Code Execution (RCE) Zero-Day Vulnerability (CVE-2016-4171) Emergency Security Advisory
[Affected Scope] Adobe Flash Player 21.0.0.242 and earlier versions across Windows, macOS, Linux, and ChromeOS
[Impact] Remote attackers can execute arbitrary code and gain full system control via specially crafted malicious Flash content (SWF)
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the only effective mitigation is to completely uninstall Flash Player from all systems
Adobe Flash Player Remote Code Execution (RCE) Vulnerability (CVE-2016-4117) Critical Security Advisory
[Affected Scope] Adobe Flash Player 21.0.0.226 and earlier versions across Windows, macOS, Linux, and ChromeOS
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and gain full system control via crafted malicious Flash content (SWF)
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended action is to completely uninstall it or disable Flash execution in all browsers and applications
Adobe Flash Player Remote Code Execution (RCE) and DoS Vulnerability (CVE-2016-1019)
[Affected Scope] Adobe Flash Player 21.0.0.197 and earlier versions
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via specially crafted Flash content
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), completely uninstall Flash Player from all systems and transition to modern web standards
Adobe Flash Player BitmapData Class Use-After-Free Remote Code Execution Vulnerability (CVE-2015-5123)
[Affected Scope] Adobe Flash Player 13.x through 18.x and 11.x legacy versions on Windows, OS X, and Linux
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player from all systems
Adobe Flash Player DisplayObject Use-After-Free Remote Code Execution Vulnerability (CVE-2015-5122)
[Affected Scope] Adobe Flash Player 13.x through 13.0.0.302, 14.x through 18.0.0.203 on Windows/OS X, and 11.x/12.x on Linux
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), completely uninstall Flash Player and transition to modern web standards like HTML5
Adobe Flash Player ActionScript 3 ByteArray Use-After-Free Remote Code Execution (CVE-2015-5119)
[Affected Scope] Adobe Flash Player 13.x through 18.x on Windows/OS X, and 11.x through 11.2.202.468 on Linux
[Impact] Remote attackers can execute arbitrary code or trigger a denial of service (system crash) via crafted Flash content
[Mitigation] Completely uninstall Adobe Flash Player or disable the Flash plugin across all web browsers and operating systems
Adobe Flash Player Heap-Based Buffer Overflow Remote Code Execution Vulnerability (CVE-2015-3113) Analysis and Mitigation Guide
[Affected Scope] Adobe Flash Player before 13.0.0.296, and 14.x through 18.x before 18.0.0.194 on Windows and OS X, and before 11.2.202.468 on Linux
[Impact] Remote attackers can execute arbitrary code and gain full system control via specially crafted malicious Flash content (.swf) without user interaction
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the recommended mitigation is to completely uninstall Flash Player and disable browser plugins across all systems
Adobe Flash Player Memory Corruption Remote Code Execution Vulnerability (CVE-2015-3043)
[Affected Scope] Adobe Flash Player versions before 13.0.0.281, 14.x through 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux
[Impact] Successful exploitation allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, which has been actively exploited in the wild
[Mitigation] Immediately uninstall Adobe Flash Player from all endpoints or upgrade to the patched versions, and disable Flash execution in web browsers
Adobe Flash Player Use-After-Free Remote Code Execution Vulnerability (CVE-2015-0313) Security Advisory
[Affected Scope] Adobe Flash Player before 13.0.0.269, 14.x through 16.x before 16.0.0.305 on Windows and OS X, and before 11.2.202.442 on Linux
[Impact] Remote attackers can execute arbitrary code (RCE) and gain full system control via specially crafted malicious Flash content (SWF) without user interaction
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the only secure mitigation is to completely uninstall Flash Player from all systems
Adobe Flash Player Remote Code Execution (RCE) Zero-Day Vulnerability (CVE-2015-0311) Analysis and Mitigation Guide
[Affected Scope] Adobe Flash Player through 13.0.0.262, 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X, and through 11.2.202.438 on Linux
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by enticing users to visit a website containing malicious Flash content (SWF)
[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall Flash Player from all endpoints and disable Flash plugins in web browsers
Adobe Flash Player Integer Underflow Remote Code Execution Vulnerability (CVE-2014-0497)
[Affected Scope] Adobe Flash Player before 11.7.700.261, 11.8.x through 12.0.x before 12.0.0.44 on Windows/macOS, and before 11.2.202.336 on Linux
[Impact] Remote attackers can execute arbitrary code and gain full control of the target system by enticing users to visit a website containing a specially crafted Flash (.swf) file
[Mitigation] Immediately uninstall legacy Adobe Flash Player or upgrade to patched versions, and disable Flash execution in all web browsers