ByteOS

cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*

>>acrobat_reader>>10.0

cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*

>>acrobat_reader>>10.0.1

cpe:2.3:a:adobe:acrobat_reader:10.0.2:*:*:*:*:*:*:*

>>acrobat_reader>>10.0.2

cpe:2.3:a:adobe:acrobat_reader:10.0.3:*:*:*:*:*:*:*

>>acrobat_reader>>10.0.3

cpe:2.3:a:adobe:acrobat_reader:10.1:*:*:*:*:*:*:*

>>acrobat_reader>>10.1

cpe:2.3:a:adobe:acrobat_reader:10.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.1

cpe:2.3:a:adobe:acrobat_reader:10.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.2

cpe:2.3:a:adobe:acrobat_reader:10.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.3

cpe:2.3:a:adobe:acrobat_reader:10.1.4:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.4

cpe:2.3:a:adobe:acrobat_reader:10.1.5:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.5

cpe:2.3:a:adobe:acrobat_reader:10.1.6:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.6

cpe:2.3:a:adobe:acrobat_reader:10.1.7:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.7

cpe:2.3:a:adobe:acrobat_reader:10.1.8:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.8

cpe:2.3:a:adobe:acrobat_reader:10.1.9:*:*:*:*:*:*:*

>>acrobat_reader>>10.1.9

cpe:2.3:a:adobe:acrobat_reader:11.0:*:*:*:*:*:*:*

>>acrobat_reader>>11.0

cpe:2.3:a:adobe:acrobat_reader:11.0.1:*:*:*:*:*:*:*

>>acrobat_reader>>11.0.1

cpe:2.3:a:adobe:acrobat_reader:11.0.2:*:*:*:*:*:*:*

>>acrobat_reader>>11.0.2

cpe:2.3:a:adobe:acrobat_reader:11.0.3:*:*:*:*:*:*:*

>>acrobat_reader>>11.0.3

cpe:2.3:a:adobe:acrobat_reader:11.0.4:*:*:*:*:*:*:*

>>acrobat_reader>>11.0.4

cpe:2.3:a:adobe:acrobat_reader:11.0.5:-:*:*:*:windows:*:*

>>acrobat_reader>>11.0.5

cpe:2.3:a:adobe:acrobat_reader:11.0.6:*:*:*:*:*:*:*

>>acrobat_reader>>11.0.6

Apple Inc.

>>mac_os_x>>*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*

>>acrobat>>10.0

cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*

>>acrobat>>10.0.1

cpe:2.3:a:adobe:acrobat:10.0.2:*:*:*:*:*:*:*

>>acrobat>>10.0.2

cpe:2.3:a:adobe:acrobat:10.0.3:*:*:*:*:*:*:*

>>acrobat>>10.0.3

cpe:2.3:a:adobe:acrobat:10.1:*:*:*:*:*:*:*

>>acrobat>>10.1

cpe:2.3:a:adobe:acrobat:10.1.1:*:*:*:*:*:*:*

>>acrobat>>10.1.1

cpe:2.3:a:adobe:acrobat:10.1.2:*:*:*:*:*:*:*

>>acrobat>>10.1.2

cpe:2.3:a:adobe:acrobat:10.1.3:*:*:*:*:*:*:*

>>acrobat>>10.1.3

cpe:2.3:a:adobe:acrobat:10.1.4:*:*:*:*:*:*:*

>>acrobat>>10.1.4

cpe:2.3:a:adobe:acrobat:10.1.5:*:*:*:*:*:*:*

>>acrobat>>10.1.5

cpe:2.3:a:adobe:acrobat:10.1.6:*:*:*:*:*:*:*

>>acrobat>>10.1.6

cpe:2.3:a:adobe:acrobat:10.1.7:*:*:*:*:*:*:*

>>acrobat>>10.1.7

cpe:2.3:a:adobe:acrobat:10.1.8:*:*:*:*:*:*:*

>>acrobat>>10.1.8

cpe:2.3:a:adobe:acrobat:10.1.9:*:*:*:*:*:*:*

>>acrobat>>10.1.9

cpe:2.3:a:adobe:acrobat:11.0:*:*:*:*:*:*:*

>>acrobat>>11.0

cpe:2.3:a:adobe:acrobat:11.0.1:*:*:*:*:*:*:*

>>acrobat>>11.0.1

cpe:2.3:a:adobe:acrobat:11.0.2:*:*:*:*:*:*:*

>>acrobat>>11.0.2

cpe:2.3:a:adobe:acrobat:11.0.3:*:*:*:*:*:*:*

>>acrobat>>11.0.3

cpe:2.3:a:adobe:acrobat:11.0.4:*:*:*:*:*:*:*

>>acrobat>>11.0.4

cpe:2.3:a:adobe:acrobat:11.0.5:-:*:*:*:windows:*:*

>>acrobat>>11.0.5

cpe:2.3:a:adobe:acrobat:11.0.6:*:*:*:*:*:*:*

>>acrobat>>11.0.6

Apple Inc.

>>mac_os_x>>*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-399	Primary	nvd@nist.gov

CWE ID: CWE-399

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://helpx.adobe.com/security/products/reader/apsb14-15.html	psirt@adobe.com	Vendor Advisory
http://helpx.adobe.com/security/products/reader/apsb14-15.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: http://helpx.adobe.com/security/products/reader/apsb14-15.html

Source: psirt@adobe.com

Resource:

Vendor Advisory

Hyperlink: http://helpx.adobe.com/security/products/reader/apsb14-15.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Similar CVEs

1682Records found

CVE-2019-16450

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.57% / 85.29%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:43

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-16460

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.61% / 85.39%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:57

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8419

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.38%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-16462

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-3.62% / 87.57%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:58

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CVE-2015-8070

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.61% / 90.22%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-5103

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.66% / 87.72%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3095, CVE-2015-5087, CVE-2015-5094, CVE-2015-5100, CVE-2015-5102, CVE-2015-5104, and CVE-2015-5115.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-16463

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.61% / 85.39%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 15:00

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-16452

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-5.69% / 90.24%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:46

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-16445

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.82% / 89.30%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:31

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2015-4430

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-62.73% / 98.36%

7 Day CHG~0.00%

Published-09 Jul, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, and CVE-2015-5117.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2015-7635

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7636, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2004-1050

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-81.51% / 99.17%

7 Day CHG~0.00%

Published-18 Nov, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Vendor-n/a Avaya LLC Microsoft Corporation

Product-ip600_media_servers s8100 ie s3400 definity_one_media_server internet_explorer modular_messaging_message_storage_server n/a

CVE-2019-16446

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.61% / 85.39%

7 Day CHG~0.00%

Published-19 Dec, 2019 | 14:33

Updated-05 Aug, 2024 | 01:17

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2004-0090

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.42% / 61.48%

7 Day CHG~0.00%

Published-15 Apr, 2005 | 04:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors.

Vendor-n/a Apple Inc.

CVE-2004-0631

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-16.08% / 94.69%

7 Day CHG~0.00%

Published-14 Aug, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.

Vendor-n/a Adobe Inc.

Product-acrobat_reader n/a

CVE-2007-4223

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-9.41% / 92.69%

7 Day CHG~0.00%

Published-08 Nov, 2007 | 11:00

Updated-07 Aug, 2024 | 14:46

Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which allows local users to gain privileges via unspecified vectors.

Product-sysinternals_debugview n/a

CVE-2004-0429

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.64% / 70.29%

7 Day CHG~0.00%

Published-02 Mar, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CVE-2007-4691

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.52% / 66.67%

7 Day CHG~0.00%

Published-15 Nov, 2007 | 01:00

Updated-07 Aug, 2024 | 15:01

The NSURL component in Apple Mac OS X 10.4 through 10.4.10 performs case-sensitive comparisons that allow attackers to bypass intended restrictions for local file system URLs.

Vendor-n/a Apple Inc.

CWE ID-CWE-264

Not Available

CVE-2015-8061

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.61% / 90.22%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2007-4689

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-7.52% / 91.70%

7 Day CHG~0.00%

Published-15 Nov, 2007 | 01:00

Updated-07 Aug, 2024 | 15:01

Double free vulnerability in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via crafted IPV6 packets.

Vendor-n/a Apple Inc.

CWE ID-CWE-399

Not Available

CVE-1999-1376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-47.30% / 97.64%

7 Day CHG~0.00%

Published-12 Sep, 2001 | 04:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.

Product-internet_information_server n/a

CVE-2007-4703

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.90% / 75.47%

7 Day CHG~0.00%

Published-15 Nov, 2007 | 20:00

Updated-07 Aug, 2024 | 15:08

The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions.

Vendor-n/a Apple Inc.

CVE-1999-1011

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-79.30% / 99.05%

7 Day CHG~0.00%

Published-02 Jun, 2000 | 04:00

Updated-03 Apr, 2025 | 01:03

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Product-internet_information_server index_server data_access_components site_server n/a

CVE-2008-1392

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.75% / 73.03%

7 Day CHG~0.00%

Published-20 Mar, 2008 | 00:00

Updated-07 Aug, 2024 | 08:17

The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the console of the guest OS accessible through anonymous VIX API calls, which has unknown impact and attack vectors.

Vendor-n/a VMware (Broadcom Inc.)Microsoft Corporation

Product-windows ace vmware_workstation player n/a

CWE ID-CWE-16

Not Available

CVE-2007-4372

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.34% / 56.50%

7 Day CHG~0.00%

Published-16 Aug, 2007 | 18:00

Updated-07 Aug, 2024 | 14:53

Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.

Vendor-netwin n/a Microsoft Corporation

Product-windows_2003_server surgemail n/a

CVE-1999-0489

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-17.11% / 94.91%

7 Day CHG~0.00%

Published-04 Feb, 2000 | 05:00

Updated-03 Apr, 2025 | 01:03

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.

Product-windows_nt n/a

CVE-1999-0535

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-11.76% / 93.60%

7 Day CHG~0.00%

Published-04 Feb, 2000 | 05:00

Updated-03 Apr, 2025 | 01:03

A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.

Product-windows_nt windows_2000 n/a

CVE-1999-0119

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-11.70% / 93.58%

7 Day CHG~0.00%

Published-04 Feb, 2000 | 05:00

Updated-03 Apr, 2025 | 01:03

Windows NT 4.0 beta allows users to read and delete shares.

Product-windows_nt n/a

CVE-1999-0874

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-84.47% / 99.31%

7 Day CHG~0.00%

Published-02 Jun, 2000 | 04:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

Product-internet_information_server windows_nt windows_2000 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8454

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.65% / 91.08%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, and CVE-2015-8452.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8407

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.76% / 92.39%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8457.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8405

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.38% / 84.80%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2019-1449

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-5.73% / 90.28%

7 Day CHG~0.00%

Published-12 Nov, 2019 | 18:53

Updated-04 Aug, 2024 | 18:20

A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.

Vendor-Microsoft Corporation

Product-office_365_proplus office Microsoft Office Office 365 ProPlus

CVE-2007-3794

Matching Score-8

Assigner-MITRE Corporation

Vendor-n/a HP Inc.Microsoft Corporation Linux Kernel Organization, Inc IBM Corporation Sun Microsystems (Oracle Corporation)Hitachi, Ltd.

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.53% / 66.76%

7 Day CHG+0.07%

Published-15 Jul, 2007 | 23:00

Updated-07 Aug, 2024 | 14:28

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

Product-cosminexus_application_server solaris hp-ux ucosminexus_operator aix cosminexus_server cosminexus_client cosminexus_developer ucosminexus_service_architect ucosminexus_developer linux_kernel ucosminexus_service_platform ucosminexus_application_server windows cosminexus_studio ucosminexus_client n/a

CVE-2015-7648

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-56.76% / 98.10%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-7647.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player linux_kernel mac_os_x n/a

CVE-2015-7636

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7637, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-7634

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.38%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7633.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2004-0168

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.22% / 78.92%

7 Day CHG~0.00%

Published-04 Mar, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."

Vendor-n/a Apple Inc.

CVE-2015-8069

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.61% / 90.22%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2007-3828

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.71% / 85.73%

7 Day CHG~0.00%

Published-17 Jul, 2007 | 21:00

Updated-07 Aug, 2024 | 14:28

Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CVE-2007-2815

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-85.87% / 99.38%

7 Day CHG~0.00%

Published-22 May, 2007 | 19:00

Updated-07 Aug, 2024 | 13:49

The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.

Product-internet_information_services n/a

CWE ID-CWE-264

Not Available

CVE-2015-7637

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.37% / 91.61%

7 Day CHG~0.00%

Published-18 Oct, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7629, CVE-2015-7631, CVE-2015-7635, CVE-2015-7636, CVE-2015-7638, CVE-2015-7639, CVE-2015-7640, CVE-2015-7641, CVE-2015-7642, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2007-3334

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-40.50% / 97.30%

7 Day CHG~0.00%

Published-21 Jun, 2007 | 22:00

Updated-07 Aug, 2024 | 14:14

Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingres Database Server 3.0.3, as used in CA (Computer Associates) products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitrary code via unknown vectors.

Vendor-ingres n/a Microsoft Corporation

Product-all_windows database_server etrust_secure_content_manager n/a

CVE-2007-5941

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-23.14% / 95.85%

7 Day CHG~0.00%

Published-14 Nov, 2007 | 01:00

Updated-07 Aug, 2024 | 15:47

Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8431

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-57.03% / 98.11%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8055

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.61% / 90.22%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8417

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.38%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8451

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.38%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8455.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7626

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.15% / 93.38%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0075

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-49.55% / 97.76%

7 Day CHG-19.03%

Published-12 Feb, 2008 | 20:00

Updated-07 Aug, 2024 | 07:32

Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows remote attackers to execute arbitrary code via crafted inputs to ASP pages.