Adobe Flash Player, Adobe AIR, Adobe AIR SDK vulnerabilities

56 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, Adobe AIR SDK, translated and rated.

CVE-2016-1000High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176.
CVE-2016-0999High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. It also affects Adobe AIR and Adobe AIR SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
CVE-2016-0997High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
CVE-2016-0995High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176.
CVE-2016-0991High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.333 and in versions 19.x through 21.x before 21.0.0.182 on Windows and OS X, as well as before 11.2.202.577 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 21.0.0.176, allowing attackers to execute arbitrary code.
CVE-2016-0986High
Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, as well as Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.
CVE-2015-8820High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
CVE-2015-8658High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service via crafted MPEG-4 data.
CVE-2016-0981High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0980High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0979High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux, and Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0978High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0977High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0976High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0972High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0970High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0969High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-0966High
Adobe Flash Player versions before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, as well as Adobe AIR and its SDK before 20.0.0.260, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8648High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8640High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. Similar issues exist in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8636High
Adobe Flash Player versions before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, as well as Adobe AIR and its SDK versions before 20.0.0.233, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8634High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 20.0.0.233, allowing attackers to execute arbitrary code.
CVE-2015-8417High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR and its SDK before version 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8415High
Buffer overflow in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7637High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as in Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7634High
Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-7626High
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as Adobe AIR versions before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2015-7625, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.
CVE-2015-5569High
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, and before 11.2.202.535 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.213, improperly implement the Flash broker API, which may lead to unspecified impacts and attack vectors.
CVE-2015-6678High
Buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as in Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-6677High
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5588High
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5582High
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5580High
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5568High
Adobe Flash Player and Adobe AIR versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, and before 11.2.202.521 on Linux, as well as Adobe AIR SDK before 19.0.0.190, allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2015-5540High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR and its SDK before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-4429High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors.
CVE-2015-3133High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3131High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 18.0.0.180, allowing attackers to execute arbitrary code.
CVE-2015-3128High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as in Adobe AIR and its SDK before version 18.0.0.180, allows attackers to execute arbitrary code.
CVE-2015-3126High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors.
CVE-2015-3123High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3121High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK versions before 18.0.0.180, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-3118High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3107High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
CVE-2015-3106High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
CVE-2015-3103High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.292 and in versions 14.x through 18.x before 18.0.0.160 on Windows and OS X, as well as before 11.2.202.466 on Linux. Similar issues exist in Adobe AIR and its SDK on various platforms, allowing attackers to execute arbitrary code.
CVE-2015-3080High
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X, as well as before 11.2.202.460 on Linux. It also affects Adobe AIR and Adobe AIR SDK before 17.0.0.172, allowing attackers to execute arbitrary code.
CVE-2014-8441High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2014-0590High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2014-0586High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.