Adobe Flash Player, Adobe AIR vulnerabilities

277 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, translated and rated.

CVE-2015-8823High
Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux. It allows attackers to execute arbitrary code via crafted text property.
CVE-2016-1005High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
CVE-2016-1002High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-1001High
A heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as in Adobe AIR before 21.0.0.176, allows attackers to execute arbitrary code.
CVE-2016-0998High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
CVE-2016-0996High
A use-after-free vulnerability in the setInterval method in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as in Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176, allows attackers to execute arbitrary code via crafted arguments.
CVE-2016-0994High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux, allows attackers to execute arbitrary code by using the actionCallMethod opcode with crafted arguments.
CVE-2016-0993High
Integer overflow in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux, allows attackers to execute arbitrary code.
CVE-2016-0992High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR and its SDK versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0990High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux, allows attackers to execute arbitrary code.
CVE-2016-0989High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR and its SDK versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0988High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux, and in Adobe AIR before 21.0.0.176, allows attackers to execute arbitrary code.
CVE-2016-0987High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176.
CVE-2016-0963High
Integer overflow in Adobe Flash Player before version 18.0.0.333 and 19.x through 21.x before version 21.0.0.182 on Windows and OS X, and before version 11.2.202.577 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2016-0962High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0961High
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The issue affects versions before 18.0.0.333 for Flash Player and before 21.0.0.176 for Adobe AIR.
CVE-2016-0960High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR versions before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8822High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via crafted MPEG-4 data.
CVE-2015-8821High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via crafted MPEG-4 data.
CVE-2015-8657High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
CVE-2015-8656High
Adobe Flash Player and Adobe AIR before specified versions allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data. This issue affects various software versions on Windows, OS X, and Linux.
CVE-2015-8655High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via crafted MPEG-4 data.
CVE-2015-8654High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through crafted MPEG-4 data. This issue affects various software versions on Windows, OS X, and Linux.
CVE-2015-8653High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via crafted MPEG-4 data.
CVE-2015-8652High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
CVE-2016-0985High
Adobe Flash Player and Adobe AIR prior to specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2016-0975High
Use-after-free vulnerability in the instanceof function in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 20.0.0.260.
CVE-2016-0974High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. A similar vulnerability exists in Adobe AIR before version 20.0.0.260 and in Adobe AIR SDK and Compiler before the same version.
CVE-2016-0973High
A use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before version 18.0.0.329 and in 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux, and in Adobe AIR before 20.0.0.260, allows attackers to execute arbitrary code.
CVE-2016-0971High
A heap-based buffer overflow in Adobe Flash Player before version 18.0.0.329 and 19.x and 20.x before version 20.0.0.306 on Windows and OS X, and before version 11.2.202.569 on Linux, as well as in Adobe AIR before version 20.0.0.260, allows attackers to execute arbitrary code.
CVE-2016-0968High
Adobe Flash Player and Adobe AIR in certain versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.329 for Flash Player and before 20.0.0.260 for Adobe AIR.
CVE-2016-0967High
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The issue affects versions before 18.0.0.329 for Flash Player and before 20.0.0.260 for Adobe AIR.
CVE-2016-0965High
Adobe Flash Player before version 18.0.0.329 and versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0964High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects various software versions on Windows, OS X, and Linux.
CVE-2015-8649High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. Similar issues exist in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8647High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux, and in Adobe AIR before 20.0.0.233, allows attackers to execute arbitrary code.
CVE-2015-8646High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8645High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.324 for Flash Player and before 20.0.0.233 for Adobe AIR.
CVE-2015-8644High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-8643High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. Similar issues exist in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8642High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8641High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8639High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK before 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8638High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8460High
Adobe Flash Player versions before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.233, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8457High
A stack-based buffer overflow in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 18.0.0.268 for Flash Player and before 20.0.0.204 for Adobe AIR.
CVE-2015-8456High
Adobe Flash Player and Adobe AIR before specified versions allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-8455High
Adobe Flash Player before version 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8451.
CVE-2015-8454High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8452High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.