Adobe Flash Player, Adobe AIR vulnerabilities

277 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, translated and rated.

CVE-2015-7627High
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR versions before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-7625High
Adobe Flash Player versions before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, as well as Adobe AIR and its SDK versions before 19.0.0.213, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-6682High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-6676High
Buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before version 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code.
CVE-2015-5587High
A stack-based buffer overflow in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5584High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code.
CVE-2015-5581High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, allows attackers to execute arbitrary code.
CVE-2015-5579High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through stack memory corruption. The issue affects versions before 18.0.0.241 for Flash Player and before 19.0.0.190 for Adobe AIR.
CVE-2015-5578High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 18.0.0.241 for Flash Player and before 19.0.0.190 for Adobe AIR.
CVE-2015-5577High
Adobe Flash Player versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as Adobe AIR and its SDK before version 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5575High
Adobe Flash Player versions before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, as well as Adobe AIR versions before 19.0.0.190, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5574High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before 11.2.202.521 on Linux, and in Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5573High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-5570High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X, as well as before version 11.2.202.521 on Linux, and in Adobe AIR and its SDK before version 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5567High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through stack memory corruption.
CVE-2015-5566High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5565High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5564High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5563High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5562High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-5561High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5560High
Integer overflow in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5559High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5558High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-5557High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5556High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5555High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-5554High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-5553High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5552High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than those listed in CVE-2015-5544 to CVE-2015-5553.
CVE-2015-5551High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5550High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5549High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5548High
Adobe Flash Player and Adobe AIR before specified versions allow attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This is a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.
CVE-2015-5547High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5546High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5545High
Adobe Flash Player and Adobe AIR prior to specified versions allow attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This is a different vulnerability than CVE-2015-5544 and other listed CVEs.
CVE-2015-5544High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2015-5545 to CVE-2015-5553.
CVE-2015-5541High
A heap-based buffer overflow in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5539High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5134High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5133High
Buffer overflow in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5132High
Buffer overflow in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-5131High
Buffer overflow in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5130High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5129High
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux.
CVE-2015-5127High
A use-after-free vulnerability in Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as in Adobe AIR before version 18.0.0.199, allows attackers to execute arbitrary code.
CVE-2015-5125High
Adobe Flash Player before version 18.0.0.232 on Windows and OS X and before version 11.2.202.508 on Linux, as well as Adobe AIR before version 18.0.0.199, allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2015-5124High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5118High
A heap-based buffer overflow in Adobe Flash Player allows for arbitrary code execution. This affects versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux.