CVE-2009-0114: Adobe Air

Medium severity, CVSS 5.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."

Affected products

• Adobe Air: version 1.5 only
• Adobe Flash Player: up to and including 10.0.12.36; version 7.0 only; version 7.0.1 only; version 7.0.25 only; version 7.0.63 only; version 7.0.69.0 only; …
• Adobe Flash Player For Linux: up to and including 10.0.15.3
• Adobe Flex: version 3.0 only

Published 2009-02-26. Last modified 2026-06-16.