ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securityfocus.com/bid/56741	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	vdb-entry signature x_refsource_OVAL x_transferred
https://code.google.com/p/chromium/issues/detail?id=161564	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/51447	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.securityfocus.com/bid/56741

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:04 Dec, 2012 | 06:05

Updated At:11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 23.0.1271.94(inclusive)

cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:*

>>chrome>>23.0.1271.0

cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:*

>>chrome>>23.0.1271.1

cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:*

>>chrome>>23.0.1271.2

cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:*

>>chrome>>23.0.1271.3

cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:*

>>chrome>>23.0.1271.4

cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:*

>>chrome>>23.0.1271.5

cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:*

>>chrome>>23.0.1271.6

cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:*

>>chrome>>23.0.1271.7

cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:*

>>chrome>>23.0.1271.8

cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:*

>>chrome>>23.0.1271.9

cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:*

>>chrome>>23.0.1271.10

cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:*

>>chrome>>23.0.1271.11

cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:*

>>chrome>>23.0.1271.12

cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:*

>>chrome>>23.0.1271.13

cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:*

>>chrome>>23.0.1271.14

cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:*

>>chrome>>23.0.1271.15

cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:*

>>chrome>>23.0.1271.16

cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:*

>>chrome>>23.0.1271.17

cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:*

>>chrome>>23.0.1271.18

cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:*

>>chrome>>23.0.1271.19

cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:*

>>chrome>>23.0.1271.20

cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:*

>>chrome>>23.0.1271.21

cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:*

>>chrome>>23.0.1271.22

cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:*

>>chrome>>23.0.1271.23

cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:*

>>chrome>>23.0.1271.24

cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:*

>>chrome>>23.0.1271.26

cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:*

>>chrome>>23.0.1271.30

cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:*

>>chrome>>23.0.1271.31

cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:*

>>chrome>>23.0.1271.32

cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:*

>>chrome>>23.0.1271.33

cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:*

>>chrome>>23.0.1271.35

cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:*

>>chrome>>23.0.1271.36

cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:*

>>chrome>>23.0.1271.37

cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:*

>>chrome>>23.0.1271.38

cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:*

>>chrome>>23.0.1271.39

cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:*

>>chrome>>23.0.1271.40

cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:*

>>chrome>>23.0.1271.41

cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:*

>>chrome>>23.0.1271.44

cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:*

>>chrome>>23.0.1271.45

cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:*

>>chrome>>23.0.1271.46

cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:*

>>chrome>>23.0.1271.49

cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:*

>>chrome>>23.0.1271.50

cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:*

>>chrome>>23.0.1271.51

cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:*

>>chrome>>23.0.1271.52

cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:*

>>chrome>>23.0.1271.53

cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:*

>>chrome>>23.0.1271.54

cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:*

>>chrome>>23.0.1271.55

cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:*

>>chrome>>23.0.1271.56

cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:*

>>chrome>>23.0.1271.57

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/51447	chrome-cve-admin@google.com	N/A
http://www.securityfocus.com/bid/56741	chrome-cve-admin@google.com	N/A
https://code.google.com/p/chromium/issues/detail?id=161564	chrome-cve-admin@google.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/51447	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/56741	af854a3a-2127-422b-91ae-364da2661108	N/A
https://code.google.com/p/chromium/issues/detail?id=161564	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Source: chrome-cve-admin@google.com

Resource: N/A

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/56741

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/56741

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

873Records found

CVE-2013-3333

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-2.03% / 83.45%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3334, and CVE-2013-3335.

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3329

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3325

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3330

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3326

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3334

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3347

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.99% / 92.88%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player linux_kernel windows mac_os_x android n/a

CVE-2013-2863

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-3.17% / 86.64%

7 Day CHG~0.00%

Published-05 Jun, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Google LLC Debian GNU/Linux

Product-debian_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3345

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.43% / 92.62%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player linux_kernel windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3363

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.53% / 93.46%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3344

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.88% / 92.82%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player linux_kernel windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3331

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-2.03% / 83.45%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-8899

Matching Score-8

Assigner-Google LLC

Matching Score-8

Assigner-Google LLC

CVSS Score-10||CRITICAL

EPSS-16.34% / 94.68%

7 Day CHG~0.00%

Published-06 May, 2020 | 16:25

Updated-17 Sep, 2024 | 03:38

Memory corruption in Quram library when decoding qmg can lead to RCE

There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0). An unauthenticated, unauthorized attacker sending a specially crafted MMS to a vulnerable phone can trigger a heap-based buffer overflow in the Quram image codec leading to an arbitrary remote code execution (RCE) without any user interaction. The Samsung ID is SVE-2020-16747.

Vendor-Google LLC Samsung

Product-android Android OS

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-2728

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-10||HIGH

EPSS-4.00% / 88.16%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-2833

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-1.40% / 80.10%

7 Day CHG~0.00%

Published-16 Apr, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.

Vendor-n/a Google LLC

Product-chrome_os n/a

CVE-2013-0767

Matching Score-8

Assigner-Mozilla Corporation

Product-enterprise_linux_desktop enterprise_linux_server_aus linux_enterprise_server linux_enterprise_software_development_kit ubuntu_linux thunderbird_esr enterprise_linux_eus seamonkey enterprise_linux_workstation thunderbird linux_enterprise_desktop firefox opensuse enterprise_linux_server n/a

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-1.91% / 82.94%

7 Day CHG~0.00%

Published-13 Jan, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.

Vendor-n/a SUSE Canonical Ltd.Mozilla Corporation Red Hat, Inc.openSUSE

CWE ID-CWE-125

Out-of-bounds Read

CVE-2013-1372

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1369

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1373

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1489

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-21.86% / 95.62%

7 Day CHG~0.00%

Published-31 Jan, 2013 | 14:10

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability.

Vendor-n/a Microsoft Corporation Google LLC Mozilla Corporation Oracle Corporation Opera

Product-internet_explorer jdk jre chrome firefox opera_browser n/a

CVE-2013-1366

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0842

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-0.35% / 57.06%

7 Day CHG~0.00%

Published-24 Jan, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2013-1379

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.70% / 90.22%

7 Day CHG~0.00%

Published-10 Apr, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 do not properly initialize pointer arrays, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc openSUSE Google LLC Apple Inc.Novell Microsoft Corporation

Product-flash_player adobe_air linux_kernel opensuse adobe_air_sdk suse_linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1378

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.03% / 91.28%

7 Day CHG~0.00%

Published-10 Apr, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3.7.0.1530 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-1380.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1368

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0790

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-5.02% / 89.48%

7 Day CHG~0.00%

Published-03 Apr, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the browser engine in Mozilla Firefox before 20.0 on Android allows remote attackers to cause a denial of service (stack memory corruption and application crash) or possibly execute arbitrary code via unknown vectors involving a plug-in.

Vendor-n/a Google LLC Mozilla Corporation

Product-firefox android n/a

CVE-2013-1371

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.72% / 87.72%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel mac_os_x adobe_air_sdk_and_compiler adobe_air_sdk windows flash_player_for_android android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-4050

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.16% / 37.10%

7 Day CHG~0.00%

Published-24 Jul, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors.

Vendor-n/a Samsung Google LLC

Product-series_5_chromebook cr-48_chromebook series_5_550_chromebook chrome_os chromebox_3 n/a

CVE-2013-1365

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1374

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.69% / 89.10%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CVE-2013-0915

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-0.22% / 44.73%

7 Day CHG~0.00%

Published-18 Mar, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow."

Vendor-n/a Google LLC

Product-chrome_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1375

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.64% / 93.13%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel mac_os_x adobe_air_sdk_and_compiler adobe_air_sdk windows flash_player_for_android android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1367

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-0645, CVE-2013-1365, CVE-2013-1366, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0639

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.99% / 93.90%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CVE-2013-0646

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.91% / 88.02%

7 Day CHG~0.00%

Published-13 Mar, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe AIR SDK before 3.6.0.6090; and Adobe AIR SDK & Compiler before 3.6.0.6090 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel mac_os_x adobe_air_sdk_and_compiler adobe_air_sdk windows flash_player_for_android android n/a

CVE-2013-0422

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-93.77% / 99.85%

7 Day CHG~0.00%

Published-10 Jan, 2013 | 21:23

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-06-15||Apply updates per vendor instructions.

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.

Vendor-n/a Canonical Ltd.openSUSE Oracle Corporation

Product-jdk opensuse jre ubuntu_linux n/a Java Runtime Environment (JRE)

CWE ID-CWE-284

Improper Access Control

CVE-2013-0649

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.69% / 89.10%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CVE-2013-0645

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.19% / 88.47%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0642, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, and CVE-2013-1373.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0630

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.17% / 91.38%

7 Day CHG~0.00%

Published-11 Jan, 2013 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0647

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.78% / 89.23%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-0638.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0638

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.78% / 89.23%

7 Day CHG~0.00%

Published-12 Feb, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5142

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-5.60% / 90.11%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Vendor-n/a openSUSE Google LLC

Product-opensuse chrome n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-5265

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5257

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5248

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5261

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.13% / 90.60%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5286

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-13 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5254

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.41% / 90.82%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5676

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.49% / 88.86%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-air android air_sdk flash_player windows mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5139

Matching Score-8

Assigner-Chrome