Adobe Flash Player, Adobe AIR vulnerabilities

277 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, translated and rated.

CVE-2015-8068High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8067High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8066High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before version 11.2.202.554 on Linux. It allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8065High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, allows attackers to execute arbitrary code.
CVE-2015-8064High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8063High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8062High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8061High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8060High
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. This is a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.
CVE-2015-8059High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8058High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8057High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8056High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8055High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-8050High
A use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, and before 11.2.202.554 on Linux, as well as in Adobe AIR before 20.0.0.204, allows attackers to execute arbitrary code via a crafted beginGradientFill call.
CVE-2015-8049High
A use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code via a crafted autoSize property value.
CVE-2015-8048High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.268 and in versions 19.x and 20.x before 20.0.0.228 on Windows and OS X, as well as before 11.2.202.554 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8047High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR versions before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8045High
Adobe Flash Player versions before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, as well as Adobe AIR before 20.0.0.204, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-8046High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8044High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before version 11.2.202.548 on Linux. A similar vulnerability exists in Adobe AIR and its SDK before version 19.0.0.241, allowing attackers to execute arbitrary code.
CVE-2015-8043High
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, allows attackers to execute arbitrary code.
CVE-2015-8042High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted loadSound call.
CVE-2015-7663High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7662High
Adobe Flash Player versions before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.241, allow remote attackers to bypass intended access restrictions and write to files via unspecified vectors.
CVE-2015-7661High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via a crafted getBounds call.
CVE-2015-7660High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted setMask arguments.
CVE-2015-7659High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion' in the NetConnection object implementation.
CVE-2015-7658High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionInstanceOf arguments.
CVE-2015-7657High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionCallMethod arguments.
CVE-2015-7656High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted actionImplementsOp arguments.
CVE-2015-7655High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted actionExtends arguments.
CVE-2015-7654High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted attachSound arguments.
CVE-2015-7653High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via crafted globalToLocal arguments.
CVE-2015-7652High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, and before 11.2.202.548 on Linux, as well as in Adobe AIR before 19.0.0.241, allows attackers to execute arbitrary code via a crafted gridFitType property value.
CVE-2015-7651High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X, as well as before 11.2.202.548 on Linux, allows attackers to execute arbitrary code via crafted DefineFunction atoms.
CVE-2015-7642High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7641High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code.
CVE-2015-7640High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7639High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code.
CVE-2015-7638High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code.
CVE-2015-7636High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code.
CVE-2015-7635High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7644High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, and in Adobe AIR before version 19.0.0.213, allows attackers to execute arbitrary code.
CVE-2015-7643High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a Video object with a crafted deblocking property.
CVE-2015-7633High
Adobe Flash Player and Adobe AIR in certain versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2015-7625, CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, and CVE-2015-7634.
CVE-2015-7632High
Buffer overflow in Adobe Flash Player before version 18.0.0.252 and 19.x before version 19.0.0.207 on Windows and OS X and before version 11.2.202.535 on Linux, as well as in Adobe AIR before version 19.0.0.213, allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.
CVE-2015-7631High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a TextLine object with a crafted validity property.
CVE-2015-7630High
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-7629High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.252 and 19.x before version 19.0.0.207 on Windows and OS X, as well as before version 11.2.202.535 on Linux, allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property.