Adobe Air vulnerabilities

146 CVEs affecting Adobe Air, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0309, published 2015-01-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0611: Adobe Flash Player Remote Code Execution Vulnerability, published 2011-04-13. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 99.4% chance of exploitation in the next 30 days. Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe…
CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity, published 2014-02-21. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2024-09-17. EPSS: 24.8% chance of exploitation in the next 30 days. Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on…
CVE-2014-0556, published 2014-09-10. High severity, CVSS 10.0. EPSS: 84.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and…
CVE-2011-2140, published 2011-08-10. High severity, CVSS 10.0. EPSS: 82.3% chance of exploitation in the next 30 days. Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android,…
CVE-2014-4671, published 2014-07-09. Medium severity, CVSS 4.3. EPSS: 23% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and…
CVE-2010-0187, published 2010-02-15. Medium severity, CVSS 4.3. EPSS: 15.6% chance of exploitation in the next 30 days. Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
CVE-2014-0559, published 2014-09-10. High severity, CVSS 10.0. EPSS: 13.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and…
CVE-2011-2415, published 2011-08-10. High severity, CVSS 10.0. EPSS: 11.8% chance of exploitation in the next 30 days. Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before…
CVE-2011-2414, published 2011-08-10. High severity, CVSS 10.0. EPSS: 11.8% chance of exploitation in the next 30 days. Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before…
CVE-2009-3794, published 2009-12-10. High severity, CVSS 9.3. EPSS: 11.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.

Latest

CVE-2015-0309, published 2015-01-13. High severity, CVSS 10.0. EPSS: 8.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows…
CVE-2015-0308, published 2015-01-13. High severity, CVSS 10.0. EPSS: 7.2% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on…
CVE-2015-0307, published 2015-01-13. High severity, CVSS 8.5. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0306, published 2015-01-13. High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0305, published 2015-01-13. High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0304, published 2015-01-13. High severity, CVSS 10.0. EPSS: 8.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows…
CVE-2015-0303, published 2015-01-13. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0302, published 2015-01-13. Medium severity, CVSS 5.0. EPSS: 4.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0301, published 2015-01-13. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2014-0558, published 2014-10-15. High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe…