Air SDK vulnerabilities

6 known vulnerabilities in Air SDK from Adobe. 6 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Adobe Flash Player Arbitrary Code Execution Exploited

  CVE-2016-1019Apr 7, 2016AdobeEPSS 22.3%

  Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

• 8.8 High severity

  Adobe Flash Player and AIR Integer Overflow Exploited

  CVE-2016-1010Mar 12, 2016AdobeEPSS 19.3%

  Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176

• 8.8 High severity

  Adobe Flash Player and AIR Use-After-Free Exploited

  CVE-2016-0984Feb 10, 2016AdobeEPSS 54.5%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.

• 8.8 High severity

  Adobe Flash Player Integer Overflow Exploited

  CVE-2015-8651Dec 28, 2015AdobeEPSS 67.7%

  Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allo

• 10.0 High severity

  Adobe Flash Player Dereferenced Pointer Exploited

  CVE-2014-8439Nov 25, 2014AdobeEPSS 20.4%

  Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execu

• 8.8 High severity

  Adobe Flash Player Double Free Vulnerablity Exploited

  CVE-2014-0502Feb 21, 2014AdobeEPSS 24.8%

  Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK