CVE-2014-0518: Adobe Air

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.

Affected products

• Adobe Adobe Air: before 13.0.0.111 (fixed in 13.0.0.111)
• Adobe Flash Player: from 13.0, before 13.0.0.214 (fixed in 13.0.0.214); from 11.0, before 11.2.202.359 (fixed in 11.2.202.359)

Published 2014-05-14. Last modified 2026-06-17.