CVE-2011-2458: Adobe Air

High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days.

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.

Affected products

• Adobe Adobe Air: from 3.0, before 3.1.0.4880 (fixed in 3.1.0.4880)
• Adobe Flash Player: from 10.0, before 10.3.183.11 (fixed in 10.3.183.11); from 11.0, before 11.1.102.55 (fixed in 11.1.102.55); from 11.0, before 11.1.102.59 (fixed in 11.1.102.59)

Published 2011-11-11. Last modified 2026-06-16.