ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/56213	vdb-entry x_refsource_XF x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/bid/38177	vdb-entry x_refsource_BID x_transferred
http://code.google.com/p/v8/source/detail?r=3560	x_refsource_CONFIRM x_transferred
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	x_refsource_CONFIRM x_transferred
http://securitytracker.com/id?1023583	vdb-entry x_refsource_SECTRACK x_transferred
http://www.vupen.com/english/advisories/2010/0361	vdb-entry x_refsource_VUPEN x_transferred
http://code.google.com/p/chromium/issues/detail?id=31009	x_refsource_CONFIRM x_transferred
http://www.osvdb.org/62316	vdb-entry x_refsource_OSVDB x_transferred
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	x_refsource_CONFIRM x_transferred
http://codereview.chromium.org/525064	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/38545	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56213

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/bid/38177

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://code.google.com/p/v8/source/detail?r=3560

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://securitytracker.com/id?1023583

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=31009

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.osvdb.org/62316

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://codereview.chromium.org/525064

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:18 Feb, 2010 | 18:00

Updated At:29 Apr, 2026 | 01:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

cpe:2.3:a:google:chrome:4.0.244.0:*:*:*:*:*:*:*

>>chrome>>4.0.244.0

cpe:2.3:a:google:chrome:4.0.249.78:beta:*:*:*:*:*:*

>>chrome>>4.0.249.78

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=31009	cve@mitre.org	Exploit
http://code.google.com/p/v8/source/detail?r=3560	cve@mitre.org	N/A
http://codereview.chromium.org/525064	cve@mitre.org	Patch
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	cve@mitre.org	N/A
http://secunia.com/advisories/38545	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1023583	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://www.osvdb.org/62316	cve@mitre.org	N/A
http://www.securityfocus.com/bid/38177	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/0361	cve@mitre.org	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56213	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=31009	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://code.google.com/p/v8/source/detail?r=3560	af854a3a-2127-422b-91ae-364da2661108	N/A
http://codereview.chromium.org/525064	af854a3a-2127-422b-91ae-364da2661108	Patch
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/38545	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1023583	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.osvdb.org/62316	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/38177	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/0361	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56213	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=31009

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://code.google.com/p/v8/source/detail?r=3560

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://codereview.chromium.org/525064

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62316

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56213

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=31009

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://code.google.com/p/v8/source/detail?r=3560

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://codereview.chromium.org/525064

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62316

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56213

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14222

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

759Records found

CVE-2013-3345

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.53% / 91.85%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1372

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1369

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1365

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1371

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.72% / 88.04%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-2833

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.40% / 80.52%

7 Day CHG~0.00%

Published-16 Apr, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.

Vendor-n/a Google LLC

Product-chrome_os n/a

CVE-2013-2931

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.78% / 82.81%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2018-5855

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.38%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 04:04

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-28605

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.49% / 81.16%

7 Day CHG~0.00%

Published-31 May, 2022 | 20:11

Updated-03 Aug, 2024 | 05:56

Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory

Vendor-linkplay n/a Apple Inc.Google LLC

Product-android iphone_os sound_bar n/a

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2018-4877

Matching Score-8

Matching Score-8

Vendor-n/a Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CVSS Score-9.8||CRITICAL

EPSS-5.04% / 89.80%

7 Day CHG~0.00%

Published-06 Feb, 2018 | 20:00

Updated-05 Aug, 2024 | 05:18

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player's quality of service functionality. A successful attack can lead to arbitrary code execution.

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os windows macos windows_10 enterprise_linux_desktop flash_player Adobe Flash Player before 28.0.0.161

CWE ID-CWE-416

Use After Free

CVE-2013-1373

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-5002

Matching Score-8

Matching Score-8

Vendor-n/a Google LLC Apple Inc.Red Hat, Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

CVSS Score-7.8||HIGH

EPSS-47.14% / 97.70%

7 Day CHG~0.00%

Published-09 Jul, 2018 | 19:00

Updated-18 Nov, 2025 | 17:03

Known KEV||Action Due Date - 2022-06-13||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Product-enterprise_linux_server chrome_os enterprise_linux_desktop windows_10 windows flash_player_desktop_runtime linux_kernel flash_player windows_8.1 enterprise_linux_workstation mac_os_x Adobe Flash Player 29.0.0.171 and earlier versions Flash Player

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-1368

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-27570

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-8.1||HIGH

EPSS-1.58% / 81.68%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:32

Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-27572

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-8.1||HIGH

EPSS-1.58% / 81.68%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:32

Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4944

Matching Score-8

Matching Score-8

Vendor-n/a Google LLC Adobe Inc.Red Hat, Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CVSS Score-9.8||CRITICAL

EPSS-24.00% / 96.06%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Product-enterprise_linux_server linux_kernel windows_8.1 enterprise_linux_workstation chrome_os windows macos windows_10 enterprise_linux_desktop flash_player Adobe Flash Player 29.0.0.140 and earlier versions

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2022-27568

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-8.1||HIGH

EPSS-1.58% / 81.68%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:32

Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-27569

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-8.1||HIGH

EPSS-1.58% / 81.68%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:32

Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26098

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-8.1||HIGH

EPSS-1.58% / 81.68%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 04:56

Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-3586

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.76%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 03:54

An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-21090

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.05%

7 Day CHG~0.00%

Published-08 Apr, 2020 | 13:27

Updated-05 Aug, 2024 | 12:19

An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 (January 2018).

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2014-0497

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player macos enterprise_linux_server_aus enterprise_linux_eus chrome linux_kernel chrome_os opensuse n/a flash_player Flash Player

CVSS Score-8.8||HIGH

EPSS-93.16% / 99.80%

7 Day CHG~0.00%

Published-05 Feb, 2014 | 02:00

Updated-21 Apr, 2026 | 21:11

Known KEV||Action Due Date - 2024-10-08||The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CVE-2012-5257

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 91.09%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5279

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.25% / 90.96%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-1402

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.43% / 62.73%

7 Day CHG~0.00%

Published-07 Mar, 2012 | 11:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the QianXun YingShi (com.qianxun.yingshi) application 1.2.3 and 1.3.4 for Android has unknown impact and attack vectors.

Vendor-1kxun n/a Google LLC

Product-android qianxun_yingshi n/a

CVE-2013-1374

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.69% / 89.39%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CVE-2018-11905

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 30.49%

7 Day CHG~0.00%

Published-07 Dec, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN function due to lack of input validation in values received from firmware.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1367

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.77%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk android air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-1383

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.34% / 56.72%

7 Day CHG~0.00%

Published-07 Mar, 2012 | 11:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors.

Vendor-netease n/a Google LLC

Product-android netease_reader n/a

CVE-2012-1480

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.34% / 56.72%

7 Day CHG~0.00%

Published-14 Mar, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Pansi SMS (com.pansi.msg) application 1.97, 2.01, and 2.07 for Android has unknown impact and attack vectors.

Vendor-pansi n/a Google LLC

Product-pansi_sms android n/a

CVE-2012-1396

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.43% / 62.73%

7 Day CHG~0.00%

Published-07 Mar, 2012 | 11:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the GO FBWidget (com.gau.go.launcherex.gowidget.fbwidget) application 1.9 and 2.1 for Android has unknown impact and attack vectors.

Vendor-goforandroid n/a Google LLC

Product-go_fbwidget android n/a

CVE-2013-1489

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-17.32% / 95.07%

7 Day CHG~0.00%

Published-31 Jan, 2013 | 14:10

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.

Vendor-n/a Oracle Corporation Google LLC Opera Mozilla Corporation Microsoft Corporation

Product-internet_explorer firefox jdk opera_browser jre chrome n/a

CVE-2012-1388

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.43% / 62.73%

7 Day CHG~0.00%

Published-07 Mar, 2012 | 11:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the XiXunTianTian (com.xixun.tiantian) application 0.6.2 beta for Android has unknown impact and attack vectors.

Vendor-xixun n/a Google LLC

Product-android xixuntiantian n/a

CVE-2012-1485

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.46% / 64.17%

7 Day CHG~0.00%

Published-15 Mar, 2012 | 17:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the NetFront Life Browser (com.access_company.android.nflifebrowser.lite) application 2.2.0 and 2.3.0 for Android has unknown impact and attack vectors.

Vendor-netfrontlife n/a Google LLC

Product-android netfront_life_browser n/a

CVE-2017-7376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-38.43% / 97.26%

7 Day CHG~0.00%

Published-19 Feb, 2018 | 19:00

Updated-05 Aug, 2024 | 15:56

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.

Vendor-n/a libxml2 (XMLSoft)Google LLC Debian GNU/Linux

Product-android debian_linux libxml2 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-1474

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.34% / 56.72%

7 Day CHG~0.00%

Published-14 Mar, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Youni SMS (com.snda.youni) application 2.1.0c and 2.1.0d for Android has unknown impact and attack vectors.

Vendor-sdo n/a Google LLC

Product-android youni_sms n/a

CVE-2022-20160

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 31.82%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 13:19

Updated-03 Aug, 2024 | 02:02

Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

Vendor-n/a Google LLC

Product-android Android

CVE-2022-20140

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-4.17% / 88.74%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 13:02

Updated-03 Aug, 2024 | 02:02

In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-227618988

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3079

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.79% / 86.16%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3075

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.29% / 79.74%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3112

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-9.8||CRITICAL

EPSS-9.68% / 92.95%

7 Day CHG~0.00%

Published-09 Dec, 2017 | 06:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

Product-enterprise_linux_desktop chrome_os enterprise_linux_workstation linux_kernel windows_8.1 enterprise_linux_server windows_10 flash_player macos windows Adobe Flash Player 27.0.0.183 and earlier versions

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-20222

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.87% / 75.34%

7 Day CHG~0.00%

Published-13 Jul, 2022 | 18:22

Updated-03 Aug, 2024 | 02:02

In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-228078096

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3063

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.45% / 89.11%

7 Day CHG~0.00%

Published-12 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.127 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2017-3078

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-69.99% / 98.69%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3061

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-53.86% / 98.01%

7 Day CHG~0.00%

Published-12 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.127 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3060

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-9.91% / 93.05%

7 Day CHG~0.00%

Published-12 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.127 and earlier.

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-20127

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-5.47% / 90.24%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 13:00

Updated-03 Aug, 2024 | 02:02

In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221862119

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-415

Double Free

CVE-2022-20229

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-12.49% / 93.96%

7 Day CHG~0.00%

Published-13 Jul, 2022 | 18:23

Updated-03 Aug, 2024 | 02:02

In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224536184

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-1375

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.64% / 93.34%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1378

Matching Score-8

Matching Score-8