Adobe Flash Player, Adobe AIR vulnerabilities

277 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, translated and rated.

CVE-2015-5117High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, and in Adobe AIR before 18.0.0.180, allows attackers to execute arbitrary code.
CVE-2015-4433High
Adobe Flash Player and Adobe AIR prior to specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-4432High
A heap-based buffer overflow exists in Adobe Flash Player that can lead to arbitrary code execution. This affects versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux.
CVE-2015-4431High
Adobe Flash Player and Adobe AIR in specific versions allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This affects versions before 13.0.0.302 for Flash Player and before 18.0.0.180 for Adobe AIR.
CVE-2015-4428High
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4430, and CVE-2015-5117.
CVE-2015-3137High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3136High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux. It also affects Adobe AIR and its SDK before version 18.0.0.180, allowing attackers to execute arbitrary code.
CVE-2015-3135High
A heap-based buffer overflow exists in Adobe Flash Player that can lead to arbitrary code execution. This affects versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux.
CVE-2015-3134High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3132High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, and in Adobe AIR before 18.0.0.180, allows attackers to execute arbitrary code.
CVE-2015-3130High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3129High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, and in Adobe AIR before 18.0.0.180, allows attackers to execute arbitrary code.
CVE-2015-3127High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, and in Adobe AIR before 18.0.0.180, allows attackers to execute arbitrary code.
CVE-2015-3124High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux, and in Adobe AIR before 18.0.0.180 allows attackers to execute arbitrary code.
CVE-2015-3122High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging unspecified 'type confusion'.
CVE-2015-3120High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-3119High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X, and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-3117High
Adobe Flash Player versions before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, as well as Adobe AIR and its SDK before version 18.0.0.180, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3105High
Adobe Flash Player and Adobe AIR in specific versions on various operating systems allow attackers to execute arbitrary code or cause a denial of service through unspecified vectors.
CVE-2015-3104High
Integer overflow in Adobe Flash Player before version 13.0.0.292 and 14.x through 18.x before version 18.0.0.160 on Windows and OS X, as well as before version 11.2.202.466 on Linux, allows attackers to execute arbitrary code.
CVE-2015-3100High
A stack-based buffer overflow in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X, and before 11.2.202.466 on Linux.
CVE-2015-3093High
Adobe Flash Player versions before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, as well as Adobe AIR and its SDK versions before 17.0.0.172, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3090High
Adobe Flash Player and Adobe AIR versions before 13.0.0.289 and 17.0.0.172 contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. This is a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.
CVE-2015-3089High
Adobe Flash Player versions before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, as well as Adobe AIR and its SDK versions before 17.0.0.172, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-3088High
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, as well as in Adobe AIR before 17.0.0.172, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3087High
Integer overflow in Adobe Flash Player before version 13.0.0.289 and in versions 14.x to 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, as well as in Adobe AIR and its SDK before version 17.0.0.172, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3086High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-3084High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-3078High
Adobe Flash Player and Adobe AIR in specific versions have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.289 for Flash Player and before 17.0.0.172 for Adobe AIR.
CVE-2015-3077High
Adobe Flash Player versions before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, as well as Adobe AIR and its SDK before version 17.0.0.172, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2015-0309High
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X, and before 11.2.202.429 on Linux.
CVE-2015-0308High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.260 and in versions 14.x through 16.x before 16.0.0.257 on Windows and OS X, as well as before 11.2.202.429 on Linux, allows attackers to execute arbitrary code.
CVE-2015-0307High
Adobe Flash Player and Adobe AIR in certain versions have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via out-of-bounds read.
CVE-2015-0306High
Adobe Flash Player and Adobe AIR versions before 13.0.0.260 and 16.0.0.257 (Windows, OS X) and before 11.2.202.429 (Linux) contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
CVE-2015-0305High
Adobe Flash Player and Adobe AIR versions before 13.0.0.260 and 16.0.0.257 on various platforms allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion'.
CVE-2015-0304High
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X, and before 11.2.202.429 on Linux.
CVE-2015-0303High
Adobe Flash Player and Adobe AIR versions before 13.0.0.260 and 16.0.0.245 (Windows, OS X) and before 11.2.202.429 (Linux) contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
CVE-2015-0301High
Adobe Flash Player and Adobe AIR versions before 13.0.0.260 and 16.0.0.257 (Windows, OS X) and before 11.2.202.429 (Linux) do not properly validate files, which may lead to unspecified impacts and attack vectors.
CVE-2014-8442High
Adobe Flash Player and Adobe AIR versions before 13.0.0.252, 15.0.0.223, and 15.0.0.356 have a vulnerability that allows attackers to transition from Low Integrity to Medium Integrity by leveraging incorrect permissions.
CVE-2014-8440High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK before version 15.0.0.356, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2014-8438High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and in Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2014-0589High
A heap-based buffer overflow in Adobe Flash Player before version 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux, as well as in Adobe AIR before 15.0.0.356, allows attackers to execute arbitrary code via unspecified vectors.
CVE-2014-0588High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux. It also affects Adobe AIR before version 15.0.0.356 and Adobe AIR SDK and Compiler before version 15.0.0.356, allowing attackers to execute arbitrary code.
CVE-2014-0585High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux, as well as Adobe AIR and its SDK versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2014-0583High
A heap-based buffer overflow in Adobe Flash Player allows attackers to elevate their integrity level from Low to Medium. This affects versions before 13.0.0.252 on Windows and OS X, and before 11.2.202.418 on Linux.
CVE-2014-0582High
A heap-based buffer overflow vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
CVE-2014-0581High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects various software versions on Windows, OS X, and Linux.
CVE-2014-0577High
Adobe Flash Player versions before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and Adobe AIR versions before 15.0.0.356, allow attackers to execute arbitrary code by leveraging an unspecified 'type confusion' vulnerability.
CVE-2014-0576High
Adobe Flash Player and Adobe AIR in specific versions are vulnerable to arbitrary code execution or denial of service due to memory corruption. The issue affects versions before 13.0.0.252 for Flash Player and before 15.0.0.356 for Adobe AIR.
CVE-2014-0574High
A double free vulnerability exists in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X, and before 11.2.202.418 on Linux. This vulnerability allows attackers to execute arbitrary code via unspecified vectors.