Air

Vendor:

First CVE: Apr 9, 2008 · Active for 18 years

413

Total CVEs

More Total CVEs than 100% of tracked products

41.3

Avg CVEs / Year

Higher CVE frequency than 99% of tracked products

9.2

Avg CVSS

Higher Avg CVSS than 85% of tracked products

1.5%

KEV Rate

Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Air over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 9, 2008

18 years ago

Most Recent CVE

Jun 27, 2017

3,315 days ago

CVE Severity & Scoring

Air413 CVEs

9%

90%

All CVEs352,708 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local2 (0.5%)

Network56 (13.6%)

Unknown355 (86.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low57 (13.8%)

High1 (0.2%)

Unknown355 (86.0%)

User Interaction

None2 (0.5%)

Unknown355 (86.0%)

Required56 (13.6%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None58 (14.0%)

Unknown355 (86.0%)

Top CVEs

Signals from CVEs in this product scope (413 CVEs).

413 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2010-1297HIGH Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac	Jun 8, 2010	7.8	97	YES	YES
CVE-2011-0609HIGH Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; a	Mar 15, 2011	7.8	95	YES	YES
CVE-2015-8651HIGH Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adob	Dec 28, 2015	8.8	92	YES	NO
CVE-2014-8440HIGH Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.	Nov 11, 2014	10.0	89	NO	YES
CVE-2015-3090HIGH Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before	May 13, 2015	10.0	86	NO	YES
CVE-2015-3105HIGH Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before	Jun 10, 2015	10.0	85	NO	YES
CVE-2013-5331HIGH Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SD	Dec 11, 2013	9.3	82	NO	YES
CVE-2014-8439HIGH Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.	Nov 25, 2014	8.8	76	YES	NO
CVE-2015-3087HIGH Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,	May 13, 2015	10.0	75	NO	YES
CVE-2015-5560HIGH Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Ado	Aug 14, 2015	10.0	73	NO	YES

View all 413 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (413 CVEs).

CISA KEV

6 CVEs

1.5% of CVEs· 96th percentile

Metasploit

6 CVEs

1.5% of CVEs· 96th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

88 CVEs

21.3% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (413 CVEs).

Media Mentions

Signals from CVEs in this product scope (413 CVEs).

Top CNAs Publishing CVEs For Air

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
1.5.3	28	9.3	6.9%	0
1.5.2	28	9.3	6.9%	0
1.5.1	28	9.3	6.9%	0
1.5	40	8.8	7.9%	3
1.1	36	9.0	7.4%	2
1.01	8	8.1	9.1%	2
1.0	38	8.9	8.7%	3