CVE-2014-0508: Adobe Air

Medium severity, CVSS 5.0. EPSS: 4.7% chance of exploitation in the next 30 days.

Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

Affected products

• Adobe Adobe Air: up to and including 4.0.0.1390; version 1.0 only; version 1.0.1 only; version 1.0.8.4990 only; version 1.0.4990 only; version 1.1 only; …
• Adobe Adobe Air SDK: up to and including 4.0.0.1628; version 3.0.0.4080 only; version 3.1.0.488 only; version 3.2.0.2070 only; version 3.3.0.3650 only; version 3.3.0.3690 only; …
• Adobe Flash Player: up to and including 11.2.202.346; version 11.0 only; version 11.0.1.152 only; version 11.0.1.153 only; version 11.1 only; version 11.1.102.55 only; …

Published 2014-04-08. Last modified 2026-06-17.