Vulnerabilities > Microsoft > Windows

DATE CVE VULNERABILITY TITLE RISK
2014-12-10 CVE-2014-9163 Stack Based Buffer Overflow vulnerability in Adobe Flash Player
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
network
low complexity
adobe apple microsoft linux
critical
10.0
2014-12-10 CVE-2014-9162 Information Exposure vulnerability in Adobe Flash Player
Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to obtain sensitive information via unspecified vectors.
network
low complexity
adobe apple microsoft linux CWE-200
critical
10.0
2014-12-10 CVE-2014-9159 Heap Buffer Overflow vulnerability in Adobe Reader and Acrobat
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-8460.
network
low complexity
adobe apple microsoft
critical
10.0
2014-12-10 CVE-2014-9158 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-8461.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8461 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8460 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-9159.
network
low complexity
adobe apple microsoft CWE-119
critical
10.0
2014-12-10 CVE-2014-8459 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8458 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0
2014-12-10 CVE-2014-8457 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8460 and CVE-2014-9159.
network
low complexity
adobe apple microsoft CWE-119
critical
10.0
2014-12-10 CVE-2014-8456 Code Injection vulnerability in multiple products
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
network
low complexity
adobe apple microsoft CWE-94
critical
10.0