Adobe Flash Player, Adobe AIR vulnerabilities

277 known CVE vulnerabilities in Adobe Flash Player, Adobe AIR, translated and rated.

CVE-2014-0573High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.252 and in versions 14.x and 15.x before 15.0.0.223 on Windows and OS X, as well as before 11.2.202.418 on Linux, and in Adobe AIR before 15.0.0.356, allows attackers to execute arbitrary code.
CVE-2014-0564High
Adobe Flash Player and Adobe AIR in specific versions have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.250 for Flash Player and before 15.0.0.293 for Adobe AIR.
CVE-2014-0558High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.250 for Flash Player and before 15.0.0.293 for Adobe AIR.
CVE-2014-0554High
Adobe Flash Player and Adobe AIR in specific versions have a vulnerability that allows attackers to bypass intended access restrictions. This affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR on various platforms.
CVE-2014-0559High
A heap-based buffer overflow exists in Adobe Flash Player and Adobe AIR that may allow attackers to execute arbitrary code. This affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR across various platforms.
CVE-2014-0557High
Adobe Flash Player and Adobe AIR in certain versions improperly restrict memory address discovery, allowing attackers to bypass the ASLR protection mechanism.
CVE-2014-0556High
A heap-based buffer overflow in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. This affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR across various platforms.
CVE-2014-0555High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. This affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR.
CVE-2014-0553High
A use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and in 14.x and 15.x before 15.0.0.152 on Windows and OS X, as well as before 11.2.202.406 on Linux, allows attackers to execute arbitrary code.
CVE-2014-0551High
Adobe Flash Player and Adobe AIR in specific versions contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption. The issue affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR.
CVE-2014-0550High
Adobe Flash Player and Adobe AIR in specific versions on various operating systems contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The issue affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR.
CVE-2014-0549High
Adobe Flash Player and Adobe AIR in specific versions across various platforms have a vulnerability that allows attackers to execute arbitrary code or cause a denial of service through memory corruption.
CVE-2014-0548High
Adobe Flash Player and Adobe AIR in certain versions allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVE-2014-0547High
Adobe Flash Player and Adobe AIR in specific versions are vulnerable to arbitrary code execution or denial of service due to memory corruption. The issue affects versions before 13.0.0.244 for Flash Player and before 15.0.0.249 for Adobe AIR.
CVE-2014-0545High
Adobe Flash Player and Adobe AIR in certain versions do not properly restrict discovery of memory addresses, allowing attackers to bypass the ASLR protection mechanism.
CVE-2014-0544High
Adobe Flash Player and Adobe AIR in certain versions improperly restrict memory address discovery, allowing attackers to bypass the ASLR protection mechanism. The issue affects versions before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, and before 11.2.202.400 on Linux.
CVE-2014-0543High
Adobe Flash Player and Adobe AIR in certain versions improperly restrict memory address discovery, allowing attackers to bypass the ASLR protection mechanism. This issue affects various platforms, including Windows, OS X, Linux, and Android.
CVE-2014-0542High
Adobe Flash Player and Adobe AIR in certain versions do not properly restrict discovery of memory addresses, allowing attackers to bypass the ASLR protection mechanism.
CVE-2014-0541High
Adobe Flash Player and Adobe AIR in versions before specified numbers have a vulnerability that allows attackers to bypass intended access restrictions. This affects Windows, OS X, and Linux systems.
CVE-2014-0540High
Adobe Flash Player and Adobe AIR in certain versions do not properly restrict discovery of memory addresses, allowing attackers to bypass the ASLR protection mechanism. This issue affects versions before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, and before 11.2.202.400 on Linux.
CVE-2014-0538High
A use-after-free vulnerability in Adobe Flash Player before version 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X, as well as before version 11.2.202.400 on Linux, allows attackers to execute arbitrary code.
CVE-2014-0539High
Adobe Flash Player and Adobe AIR in specific versions allow attackers to bypass intended access restrictions via unspecified vectors. This is a different vulnerability than CVE-2014-0537.
CVE-2014-0537High
Adobe Flash Player and Adobe AIR prior to specified versions contain a vulnerability that allows attackers to bypass intended access restrictions. This issue affects various platforms, including Windows, OS X, and Linux.
CVE-2014-0535High
Adobe Flash Player and Adobe AIR versions before 13.0.0.223 and 14.0.0.125 on Windows and OS X, and before 11.2.202.378 on Linux have a vulnerability that allows attackers to bypass intended access restrictions. This is a different vulnerability than CVE-2014-0534.
CVE-2014-0507High
Buffer overflow in Adobe Flash Player before version 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, as well as in Adobe AIR before 13.0.0.83 on Android, allows attackers to execute arbitrary code.
CVE-2014-0506High
A use-after-free vulnerability in Adobe Flash Player before version 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X, and before 11.2.202.350 on Linux, as well as in Adobe AIR before 13.0.0.83 on Android, allows remote attackers to execute arbitrary code.
CVE-2013-5331High
Adobe Flash Player and Adobe AIR before specified versions contain a vulnerability that allows remote attackers to execute arbitrary code via crafted .swf content. This vulnerability was exploited in the wild in December 2013.