ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:103

Resource:

vendor-advisory

x_refsource_MANDRIVA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.ubuntu.com/usn/USN-1623-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://code.google.com/p/chromium/issues/detail?id=141901	x_refsource_CONFIRM x_transferred
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/51215	third-party-advisory x_refsource_SECUNIA x_transferred
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2013:103	vendor-advisory x_refsource_MANDRIVA x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1623-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=141901

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:103

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:22 Aug, 2012 | 10:42

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*

>>chrome_os>>Versions up to 21.0.1180.81(inclusive)

cpe:2.3:o:google:chrome_os:21.0.1180.0:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.0

cpe:2.3:o:google:chrome_os:21.0.1180.1:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.1

cpe:2.3:o:google:chrome_os:21.0.1180.2:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.2

cpe:2.3:o:google:chrome_os:21.0.1180.3:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.3

cpe:2.3:o:google:chrome_os:21.0.1180.4:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.4

cpe:2.3:o:google:chrome_os:21.0.1180.5:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.5

cpe:2.3:o:google:chrome_os:21.0.1180.6:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.6

cpe:2.3:o:google:chrome_os:21.0.1180.7:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.7

cpe:2.3:o:google:chrome_os:21.0.1180.8:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.8

cpe:2.3:o:google:chrome_os:21.0.1180.9:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.9

cpe:2.3:o:google:chrome_os:21.0.1180.10:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.10

cpe:2.3:o:google:chrome_os:21.0.1180.11:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.11

cpe:2.3:o:google:chrome_os:21.0.1180.13:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.13

cpe:2.3:o:google:chrome_os:21.0.1180.14:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.14

cpe:2.3:o:google:chrome_os:21.0.1180.15:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.15

cpe:2.3:o:google:chrome_os:21.0.1180.17:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.17

cpe:2.3:o:google:chrome_os:21.0.1180.18:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.18

cpe:2.3:o:google:chrome_os:21.0.1180.31:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.31

cpe:2.3:o:google:chrome_os:21.0.1180.32:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.32

cpe:2.3:o:google:chrome_os:21.0.1180.33:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.33

cpe:2.3:o:google:chrome_os:21.0.1180.34:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.34

cpe:2.3:o:google:chrome_os:21.0.1180.35:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.35

cpe:2.3:o:google:chrome_os:21.0.1180.36:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.36

cpe:2.3:o:google:chrome_os:21.0.1180.37:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.37

cpe:2.3:o:google:chrome_os:21.0.1180.38:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.38

cpe:2.3:o:google:chrome_os:21.0.1180.39:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.39

cpe:2.3:o:google:chrome_os:21.0.1180.41:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.41

cpe:2.3:o:google:chrome_os:21.0.1180.46:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.46

cpe:2.3:o:google:chrome_os:21.0.1180.47:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.47

cpe:2.3:o:google:chrome_os:21.0.1180.48:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.48

cpe:2.3:o:google:chrome_os:21.0.1180.49:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.49

cpe:2.3:o:google:chrome_os:21.0.1180.50:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.50

cpe:2.3:o:google:chrome_os:21.0.1180.79:*:*:*:*:*:*:*

>>chrome_os>>21.0.1180.79

Acer Inc.

>>ac700_chromebook>>-

cpe:2.3:h:acer:ac700_chromebook:-:*:*:*:*:*:*:*

cpe:2.3:h:google:cr-48_chromebook:-:*:*:*:*:*:*:*

>>cr-48_chromebook>>-

Samsung

>>series_5_550_chromebook>>-

cpe:2.3:h:samsung:series_5_550_chromebook:-:*:*:*:*:*:*:*

Samsung

>>series_5_chromebook>>-

cpe:2.3:h:samsung:series_5_chromebook:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=141901	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/51215	chrome-cve-admin@google.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2013:103	chrome-cve-admin@google.com	N/A
http://www.ubuntu.com/usn/USN-1623-1	chrome-cve-admin@google.com	N/A
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264	chrome-cve-admin@google.com	N/A
http://code.google.com/p/chromium/issues/detail?id=141901	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/51215	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2013:103	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1623-1	af854a3a-2127-422b-91ae-364da2661108	N/A
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=141901

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html

Source: chrome-cve-admin@google.com

Resource: N/A

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:103

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1623-1

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=141901

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2013:103

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1623-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2774Records found

CVE-2013-3343

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.30% / 89.79%

7 Day CHG~0.00%

Published-12 Jun, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.90 and 11.x before 11.7.700.224 on Windows, before 10.3.183.90 and 11.x before 11.7.700.225 on Mac OS X, before 10.3.183.90 and 11.x before 11.2.202.291 on Linux, before 11.1.111.59 on Android 2.x and 3.x, and before 11.1.115.63 on Android 4.x; Adobe AIR before 3.7.0.2090 on Windows and Android and before 3.7.0.2100 on Mac OS X; and Adobe AIR SDK & Compiler before 3.7.0.2090 on Windows and before 3.7.0.2100 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3077

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-53.86% / 97.93%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3079

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-3.63% / 87.54%

7 Day CHG~0.00%

Published-20 Jun, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 25.0.0.171 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3100

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-3.39% / 87.12%

7 Day CHG~0.00%

Published-10 Jun, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3832

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-6.83% / 91.14%

7 Day CHG~0.00%

Published-01 Oct, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3874

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.58%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and 23286323.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3869

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.04% / 77.02%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23036083.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3867

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.58%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23213430.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5270

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.96% / 90.44%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5264

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5259

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5275

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.76% / 91.09%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-5274, CVE-2012-5276, CVE-2012-5277, and CVE-2012-5280.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5285

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-8.26% / 92.04%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5260

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5144

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-3.50% / 87.34%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."

Vendor-libav n/a openSUSE Google LLC Canonical Ltd.

Product-opensuse ubuntu_linux chrome libav n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5272

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-9.94% / 92.86%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5276

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.76% / 91.09%

7 Day CHG~0.00%

Published-07 Nov, 2012 | 02:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-4165

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-6.04% / 90.51%

7 Day CHG~0.00%

Published-21 Aug, 2012 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4163 and CVE-2012-4164.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2806

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-3.57% / 87.44%

7 Day CHG~0.00%

Published-29 Aug, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Google LLC Microsoft Corporation

Product-windows chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2140

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-89.32% / 99.53%

7 Day CHG-0.51%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2452

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.31%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-18067

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.19% / 78.47%

7 Day CHG~0.00%

Published-15 Mar, 2018 | 21:00

Updated-05 Aug, 2024 | 21:13

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in lim_send_auth_mgmt_frame() leads to buffer overflow.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2415

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-12.17% / 93.65%

7 Day CHG-1.19%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2460

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.31%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2457

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.75% / 89.19%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2445

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.31%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2454

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.31%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2425

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.86% / 92.36%

7 Day CHG-0.91%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2414

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-12.17% / 93.65%

7 Day CHG-1.19%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2130

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.60% / 91.65%

7 Day CHG-0.80%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2455

Matching Score-10

Matching Score-10

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 82.31%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-15815

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.60% / 68.90%

7 Day CHG~0.00%

Published-15 Mar, 2018 | 21:00

Updated-05 Aug, 2024 | 20:04

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-14916

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 28.89%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3326

Matching Score-10

Matching Score-10

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-13281

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-2.54% / 85.14%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 16:00

Updated-16 Sep, 2024 | 18:54

In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71603262.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0476

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.62% / 85.35%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.

Vendor-n/a Google LLC

Product-chrome_os chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0477

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.68% / 85.50%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome_os chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-13267

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-2.86% / 85.94%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 16:00

Updated-16 Sep, 2024 | 22:01

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69479009.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-13266

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.26% / 79.04%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 00:56

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478941.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-13177

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-10.05% / 92.90%

7 Day CHG~0.00%

Published-12 Jan, 2018 | 23:00

Updated-16 Sep, 2024 | 18:44

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68320413.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1375

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-10.64% / 93.13%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel mac_os_x adobe_air_sdk_and_compiler adobe_air_sdk windows flash_player_for_android android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1370

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1379

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-5.70% / 90.21%

7 Day CHG~0.00%

Published-10 Apr, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc openSUSE Google LLC Apple Inc.Novell Microsoft Corporation

Product-flash_player adobe_air linux_kernel opensuse adobe_air_sdk suse_linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1365

Matching Score-10

Matching Score-10

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3415

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.93% / 75.73%

7 Day CHG-0.27%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3253

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.14% / 34.80%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-8411

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 30.26%

7 Day CHG~0.00%

Published-27 Jan, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3414

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.24% / 47.08%

7 Day CHG-0.01%

Published-16 Sep, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. NOTE: this issue exists because of an incorrect fix for CVE-2010-3112 on Mac OS X.

Vendor-n/a Google LLC Apple Inc.

Product-macos chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2902

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.82% / 74.01%

7 Day CHG~0.00%

Published-28 Jul, 2010 | 19:32

Updated-11 Apr, 2025 | 00:51

The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2901

Matching Score-10

Assigner-MITRE Corporation