AI
Product
Air
On CISA KEVExploited in the wild
415
CVEs
8
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 58Medium 0Low 0
Watch
Add Air to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1868 | – | Jul 31 | Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-1867 | – | Jul 31 | Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog,… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-1866 | – | Jul 31 | Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-1865 | – | Jul 31 | Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-1864 | – | Jul 31 | Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-1863 | – | Jul 31 | Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application… Affected: through 1.5.1; 1.0; 1.01; 1.1; 1.5 |
| CVE-2009-0522 | – | Feb 26 | Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified… Affected: 1.5 |
| CVE-2009-0520 | – | Feb 26 | Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows… Affected: 1.5 |
| CVE-2009-0519 | – | Feb 26 | Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly… Affected: 1.5 |
| CVE-2009-0114 | – | Feb 26 | Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to… Affected: 1.5 |
| CVE-2008-5363 | – | Dec 8 | The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during… Affected: before 1.5 |
| CVE-2008-5362 | – | Dec 8 | The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an… Affected: before 1.5 |
| CVE-2008-5361 | – | Dec 8 | The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when… Affected: before 1.5 |
| CVE-2008-1655 | – | Apr 9 | Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown… Affected: 1.0 |
| CVE-2007-6019 | – | Apr 9 | Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript… Affected: 1.0 |