Adobe Air
Vendor:
First CVE: Jul 10, 2007 · Active for 19 years
146
Total CVEs
More Total CVEs than 99% of tracked products
16.2
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
9.2
Avg CVSS
Higher Avg CVSS than 85% of tracked products
1.4%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Adobe Air over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 10, 2007
19 years ago
Most Recent CVE
Jan 13, 2015
4,211 days ago
CVE Severity & Scoring
Adobe Air146 CVEs
10%
90%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network2 (1.4%)
Unknown144 (98.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (1.4%)
High0 (0.0%)
Unknown144 (98.6%)
User Interaction
None0 (0.0%)
Unknown144 (98.6%)
Required2 (1.4%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None2 (1.4%)
Unknown144 (98.6%)
Top CVEs
Signals from CVEs in this product scope (146 CVEs).
146 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-0611HIGH Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib | Apr 13, 2011 | 8.8 | 98 | YES | YES |
CVE-2011-2140HIGH Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1. | Aug 10, 2011 | 10.0 | 90 | NO | YES |
CVE-2014-0556HIGH Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0 | Sep 10, 2014 | 10.0 | 86 | NO | YES |
CVE-2014-0502HIGH Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR b | Feb 21, 2014 | 8.8 | 78 | YES | NO |
CVE-2011-2136HIGH Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS | Aug 10, 2011 | 10.0 | 36 | NO | NO |
CVE-2011-2137HIGH Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS | Aug 10, 2011 | 10.0 | 36 | NO | NO |
CVE-2011-2457HIGH Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Ado | Nov 11, 2011 | 10.0 | 35 | NO | NO |
CVE-2011-2456HIGH Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR befor | Nov 11, 2011 | 10.0 | 35 | NO | NO |
CVE-2011-2416HIGH Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS | Aug 10, 2011 | 10.0 | 35 | NO | NO |
CVE-2011-2415HIGH Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS | Aug 10, 2011 | 10.0 | 35 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (146 CVEs).
CISA KEV
2 CVEs
1.4% of CVEs· 96th percentile
Metasploit
4 CVEs
2.7% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
2.7% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (146 CVEs).
Media Mentions
Signals from CVEs in this product scope (146 CVEs).
Top CNAs Publishing CVEs For Adobe Air
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.9.0.1380 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.9.0.1210 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.9.0.1060 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.9.0.1030 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.8.0.910 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.8.0.870 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.7.0.2090 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.7.0.1860 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.7.0.1530 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.6.0.6090 | 3 | 6.2 | 4.7% | 0 | 0 |
| 3.6.0.597 | 6 | 8.1 | 5.0% | 0 | 0 |
| 3.5.0.890 | 7 | 8.4 | 5.9% | 0 | 0 |
| 3.5.0.880 | 8 | 8.6 | 6.2% | 0 | 0 |
| 3.5.0.600 | 8 | 8.6 | 6.2% | 0 | 0 |
| 3.5.0.1060 | 7 | 8.4 | 5.9% | 0 | 0 |
| 3.4.0.2710 | 7 | 8.4 | 5.9% | 0 | 0 |
| 3.4.0.2540 | 7 | 8.4 | 5.9% | 0 | 0 |
| 3.3.0.3670 | 34 | 9.7 | 6.2% | 0 | 0 |
| 3.2.0.2070 | 34 | 9.7 | 6.2% | 0 | 0 |
| 3.2.0.207 | 34 | 9.7 | 6.2% | 0 | 0 |