Adobe Air SDK vulnerabilities

96 CVEs affecting Adobe Air SDK, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0309, published 2015-01-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity, published 2014-02-21. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2024-09-17. EPSS: 24.8% chance of exploitation in the next 30 days. Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on…
CVE-2014-0556, published 2014-09-10. High severity, CVSS 10.0. EPSS: 84.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and…
CVE-2014-4671, published 2014-07-09. Medium severity, CVSS 4.3. EPSS: 23% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and…
CVE-2014-0559, published 2014-09-10. High severity, CVSS 10.0. EPSS: 13.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and…
CVE-2014-0536, published 2014-06-11. High severity, CVSS 10.0. EPSS: 10.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK &…
CVE-2014-0535, published 2014-06-11. High severity, CVSS 7.5. EPSS: 10.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK &…
CVE-2014-0553, published 2014-09-10. High severity, CVSS 10.0. EPSS: 9.6% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows…
CVE-2013-1375, published 2013-03-13. High severity, CVSS 10.0. EPSS: 9.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44…
CVE-2015-0309, published 2015-01-13. High severity, CVSS 10.0. EPSS: 8.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows…
CVE-2015-0304, published 2015-01-13. High severity, CVSS 10.0. EPSS: 8.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows…

Latest

CVE-2015-0308, published 2015-01-13. High severity, CVSS 10.0. EPSS: 7.2% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on…
CVE-2015-0307, published 2015-01-13. High severity, CVSS 8.5. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0306, published 2015-01-13. High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0305, published 2015-01-13. High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0303, published 2015-01-13. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0302, published 2015-01-13. Medium severity, CVSS 5.0. EPSS: 4.9% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2015-0301, published 2015-01-13. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before…
CVE-2014-0558, published 2014-10-15. High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days. Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe…