Adobe Air Desktop Runtime vulnerabilities

88 CVEs affecting Adobe Air Desktop Runtime, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4163, published 2016-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0984: Adobe Flash Player and AIR Use-After-Free Vulnerability, published 2016-02-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 54.5% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR…
CVE-2016-1019: Adobe Flash Player Arbitrary Code Execution Vulnerability, published 2016-04-07. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 22.3% chance of exploitation in the next 30 days. Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild…
CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability, published 2016-03-12. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 19.3% chance of exploitation in the next 30 days. Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK…
CVE-2014-0569, published 2014-10-15. High severity, CVSS 9.3. EPSS: 91.3% chance of exploitation in the next 30 days. Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before…
CVE-2016-0971, published 2016-02-10. High severity, CVSS 8.8. EPSS: 33.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK…
CVE-2016-0974, published 2016-02-10. High severity, CVSS 8.8. EPSS: 30.8% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR…
CVE-2016-1000, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.6% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0999, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.6% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0997, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.5% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0998, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.3% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…

Latest

CVE-2016-4163, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-4162, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-4161, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-4160, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-4126, published 2016-06-16. High severity, CVSS 8.8. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack…
CVE-2016-4121, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 10% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary…
CVE-2016-4120, published 2016-06-16. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-1033, published 2016-04-09. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-1032, published 2016-04-09. High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of…
CVE-2016-1031, published 2016-04-09. High severity, CVSS 8.8. EPSS: 5.1% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary…