Flash 0-days, 2010 onwards

	A	B	C	D	E	F	G	H
1
2	Date	CVE	Bulletin	Targets	Vuln type	Code area	URL	Notes
3
4	4/28/2014	CVE-2014-0515	APSB14-13	Syrian citizens... sigh...		Pixel Bender	http://www.securelist.com/en/blog/8212/New_Flash_Player_0_day_CVE_2014_0515_used_in_watering_hole_attacks
5	2/20/2014	CVE-2014-0502	APSB14-07	American interests, freedom activists, human rights organizations	Object lifetime	Workers	http://www.fireeye.com/blog/technical/targeted-attack/2014/02/operation-greedywonk-multiple-economic-and-foreign-policy-sites-compromised-serving-up-flash-zero-day-exploit.html
6	2/4/2014	CVE-2014-0497	APSB14-04	Koreans?	Integer underflow	AVM2	http://www.securelist.com/en/blog/8177/CVE_2014_0497_a_0_day_vulnerability
7	12/10/2013	CVE-2013-5331	APSB13-28		Type confusion	AVM1
8	2/26/2013	CVE-2013-0648 (and CVE-2013-0643)	APSB13-08	Firefox users		ExternalInterface
9	2/7/2013	CVE-2013-0633	APSB13-04		Buffer overflow		https://www.securelist.com/en/blog/blog?weblogid=208194112
10	2/7/2013	CVE-2013-0634	APSB13-04	Aerospace / Includes Mac users	Heap overflow	Regex engine	http://blogs.mcafee.com/mcafee-labs/adobe-flash-zero-day-attack-uses-advanced-exploitation-technique
11	8/14/2012	CVE-2012-1535	APSB12-18		Integer overflow	CFF font parser	http://blogs.technet.com/b/mmpc/archive/2012/08/28/a-technical-analysis-on-cve-2012-1535-adobe-flash-player-vulnerability.aspx
12	5/4/2012	CVE-2012-0779	APSB12-09	Defense industry	Object confusion	RTMP (AMF parsing)	https://community.rapid7.com/community/metasploit/blog/2012/06/22/the-secret-sauce-to-cve-2012-0779-adobe-flash-object-confusion-vulnerability
13	2/15/2012	CVE-2012-0767	APSB12-03		UXSS (IE only)
14	9/21/2011	CVE-2011-2444	APSB11-26		UXSS			(At this point, Tavis' flash fuzz rampage is in)
15	6/14/2011	CVE-2011-2110	APSB11-18		Memory corruption
16	6/5/2011	CVE-2011-2107	APSB11-13		UXSS
17	5/12/2011	CVE-2011-0627	APSB11-12		Memory corruption
18	4/11/2011	CVE-2011-0611	APSA11-02		Memory corruption
19	3/14/2011	CVE-2011-0609	APSA11-01		Memory corruption	AVM	https://sites.google.com/site/zerodayresearch/Inside_AVM_REcon2012.pdf?attredirects=0
20	10/28/2010	CVE-2010-3654	APSA10-05		Memory corruption	AVM2 verifier	https://sites.google.com/site/zerodayresearch/CanSecWest2011_Flash_ActionScript.pdf?attredirects=0
21	9/13/2010	CVE-2010-2884	APSA10-03		?? Memory corruption
22	6/4/2010	CVE-2010-1297	APSA10-01		Memory corruption
23
24
25	Some more that are in-triage:	(NOT declared as 0-day in advisory)
26	11/10/2011	CVE-2011-2445	APSB11-28				??
27	6/14/2011	CVE-2011-0618	APSB11-12		Integer overflow	AVM	http://users.ece.cmu.edu/~tdumitra/public_documents/bilge12_zero_day.pdf
28	9/28/2012	CVE-2012-5054	APSB12-19	Freedom activists	Integer overflow	3D	https://www.securelist.com/en/blog/208194112/Adobe_Flash_Player_0_day_and_HackingTeam_s_Remote_Control_System
29	9/28/2012	CVE-2012-4167	APSB12-19				https://www.securelist.com/en/blog/208194112/Adobe_Flash_Player_0_day_and_HackingTeam_s_Remote_Control_System
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100