ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securityfocus.com/bid/56741	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	vdb-entry signature x_refsource_OVAL x_transferred
https://code.google.com/p/chromium/issues/detail?id=161564	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/51447	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.securityfocus.com/bid/56741

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:04 Dec, 2012 | 06:05

Updated At:11 Apr, 2025 | 00:51

Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 23.0.1271.94(inclusive)

cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:*

>>chrome>>23.0.1271.0

cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:*

>>chrome>>23.0.1271.1

cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:*

>>chrome>>23.0.1271.2

cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:*

>>chrome>>23.0.1271.3

cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:*

>>chrome>>23.0.1271.4

cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:*

>>chrome>>23.0.1271.5

cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:*

>>chrome>>23.0.1271.6

cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:*

>>chrome>>23.0.1271.7

cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:*

>>chrome>>23.0.1271.8

cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:*

>>chrome>>23.0.1271.9

cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:*

>>chrome>>23.0.1271.10

cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:*

>>chrome>>23.0.1271.11

cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:*

>>chrome>>23.0.1271.12

cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:*

>>chrome>>23.0.1271.13

cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:*

>>chrome>>23.0.1271.14

cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:*

>>chrome>>23.0.1271.15

cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:*

>>chrome>>23.0.1271.16

cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:*

>>chrome>>23.0.1271.17

cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:*

>>chrome>>23.0.1271.18

cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:*

>>chrome>>23.0.1271.19

cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:*

>>chrome>>23.0.1271.20

cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:*

>>chrome>>23.0.1271.21

cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:*

>>chrome>>23.0.1271.22

cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:*

>>chrome>>23.0.1271.23

cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:*

>>chrome>>23.0.1271.24

cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:*

>>chrome>>23.0.1271.26

cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:*

>>chrome>>23.0.1271.30

cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:*

>>chrome>>23.0.1271.31

cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:*

>>chrome>>23.0.1271.32

cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:*

>>chrome>>23.0.1271.33

cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:*

>>chrome>>23.0.1271.35

cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:*

>>chrome>>23.0.1271.36

cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:*

>>chrome>>23.0.1271.37

cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:*

>>chrome>>23.0.1271.38

cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:*

>>chrome>>23.0.1271.39

cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:*

>>chrome>>23.0.1271.40

cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:*

>>chrome>>23.0.1271.41

cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:*

>>chrome>>23.0.1271.44

cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:*

>>chrome>>23.0.1271.45

cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:*

>>chrome>>23.0.1271.46

cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:*

>>chrome>>23.0.1271.49

cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:*

>>chrome>>23.0.1271.50

cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:*

>>chrome>>23.0.1271.51

cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:*

>>chrome>>23.0.1271.52

cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:*

>>chrome>>23.0.1271.53

cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:*

>>chrome>>23.0.1271.54

cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:*

>>chrome>>23.0.1271.55

cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:*

>>chrome>>23.0.1271.56

cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:*

>>chrome>>23.0.1271.57

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	chrome-cve-admin@google.com	N/A
http://secunia.com/advisories/51447	chrome-cve-admin@google.com	N/A
http://www.securityfocus.com/bid/56741	chrome-cve-admin@google.com	N/A
https://code.google.com/p/chromium/issues/detail?id=161564	chrome-cve-admin@google.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/51447	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/56741	af854a3a-2127-422b-91ae-364da2661108	N/A
https://code.google.com/p/chromium/issues/detail?id=161564	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Source: chrome-cve-admin@google.com

Resource: N/A

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/56741

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Source: chrome-cve-admin@google.com

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2012/11/stable-channel-update_29.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/56741

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://code.google.com/p/chromium/issues/detail?id=161564

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15638

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

873Records found

CVE-2015-8061

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-7626

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7663

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-13.60% / 93.98%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8070

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8065

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8064

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2010-2900

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.23% / 45.86%

7 Day CHG~0.00%

Published-28 Jul, 2010 | 19:32

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-8046

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-69.24% / 98.58%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8044.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8059

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2010-1505

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.12% / 77.34%

7 Day CHG~0.00%

Published-23 Apr, 2010 | 14:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-8067

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-7640

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.68% / 92.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-7627

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.21%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8062

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8066

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8055

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8073

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.58%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8063

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.68% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8096

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.25% / 92.86%

7 Day CHG~0.00%

Published-09 Nov, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow.

Vendor-n/a Google LLC

Product-picasa n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1228

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.25% / 47.88%

7 Day CHG-0.09%

Published-01 Apr, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2010-1229

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.43% / 61.77%

7 Day CHG-0.16%

Published-01 Apr, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-7641

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.68% / 92.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-7637

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.68% / 92.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-5957

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.49% / 64.59%

7 Day CHG~0.00%

Published-28 Sep, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name.

Vendor-roaring_penguin n/a openSUSE

Product-opensuse remind n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6765

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-4.71% / 88.96%

7 Day CHG~0.00%

Published-06 Dec, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-6601

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.47% / 80.12%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6603

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-3.76% / 87.58%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6636

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-1.21% / 78.20%

7 Day CHG~0.00%

Published-06 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 25070493 and 24686670.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6610

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-0.21% / 43.70%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka internal bug 23707088.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6609

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-5.92% / 90.27%

7 Day CHG~0.00%

Published-03 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-6575

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-18.58% / 95.01%

7 Day CHG~0.00%

Published-01 Oct, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917.

Vendor-n/a Google LLC

Product-android n/a

CVE-2015-6598

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-10||HIGH

EPSS-1.40% / 79.67%

7 Day CHG~0.00%

Published-06 Oct, 2015 | 17:00

Updated-12 Apr, 2025 | 10:46

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-1230

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.30% / 52.89%

7 Day CHG~0.00%

Published-01 Apr, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-5125

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.28% / 89.63%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5122

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-92.38% / 99.72%

7 Day CHG~0.00%

Published-14 Jul, 2015 | 10:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.

CWE ID-CWE-416

Use After Free

CVE-2015-5133

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5587

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.00% / 91.75%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5568

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-31.84% / 96.66%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-5567

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.27% / 86.66%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5579.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5574

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.01% / 98.64%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5581, CVE-2015-5584, and CVE-2015-6682.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-5132

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-71.45% / 98.66%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5130

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-52.98% / 97.87%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2015-5127

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-52.98% / 97.87%

7 Day CHG~0.00%

Published-14 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2015-5569

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.01% / 90.34%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 improperly implement the Flash broker API, which has unspecified impact and attack vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-5577

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.30% / 88.43%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0646

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.91% / 93.12%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-11 Apr, 2025 | 00:51

Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2015-5579

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.08% / 93.18%

7 Day CHG~0.00%

Published-22 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5567.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-5124

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.43% / 93.31%

7 Day CHG~0.00%

Published-20 Jul, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel evergreen air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4486

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-2.19% / 83.72%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 01:00

Updated-12 Apr, 2025 | 10:46

The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via malformed WebM video data.

Vendor-n/a Mozilla Corporation openSUSE Oracle Corporation Canonical Ltd.

Product-firefox opensuse ubuntu_linux solaris n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3870

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)