Adobe Flex vulnerabilities

15 CVEs affecting Adobe Flex, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1870, published 2009-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6019, published 2008-04-09. High severity, CVSS 9.3. EPSS: 59.8% chance of exploitation in the next 30 days. Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents…
CVE-2009-0520, published 2009-02-26. High severity, CVSS 9.3. EPSS: 28.5% chance of exploitation in the next 30 days. Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to…
CVE-2009-1868, published 2009-07-31. High severity, CVSS 9.3. EPSS: 21.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly…
CVE-2009-1869, published 2009-07-31. High severity, CVSS 9.3. EPSS: 19.7% chance of exploitation in the next 30 days. Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a…
CVE-2009-0519, published 2009-02-26. High severity, CVSS 9.3. EPSS: 14.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code…
CVE-2009-1866, published 2009-07-31. High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or…
CVE-2009-1864, published 2009-07-31. High severity, CVSS 9.3. EPSS: 7.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly…
CVE-2009-1865, published 2009-07-31. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…
CVE-2009-1863, published 2009-07-31. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly…
CVE-2008-1655, published 2008-04-09. Medium severity, CVSS 4.3. EPSS: 4.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

Latest

CVE-2009-1870, published 2009-07-31. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive,…
CVE-2009-1867, published 2009-07-31. Medium severity, CVSS 4.3. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a…
CVE-2009-0522, published 2009-02-26. Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days. Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse…