VYPR
← Adobe Inc.

Vendor CVEs

Adobe Inc.

All CVEs

7,875 total · sorted by risk
  • CVE-2014-8440Nov 11, 2014
    Adobe Inc.
    Air
    risk 0.10cvss —epss 0.82

    Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code…

  • CVE-2014-0569Oct 15, 2014
    Adobe Inc.
    Air SDK
    risk 0.10cvss —epss 0.91

    Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to…

  • CVE-2014-0556Sep 10, 2014
    Adobe Inc.
    Air
    risk 0.10cvss —epss 0.84

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and…

  • CVE-2012-0779May 4, 2012
    Adobe Inc.
    Flashplayer
    risk 0.10cvss —epss 0.86

    Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object…

  • CVE-2011-2140Aug 10, 2011
    Adobe Inc.
    Air
    risk 0.10cvss —epss 0.82

    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory…

  • CVE-2011-2110Jun 16, 2011
    Adobe Inc.
    Flashplayer
    risk 0.10cvss —epss 0.86

    Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June…

  • CVE-2015-3087May 13, 2015
    Adobe Inc.
    Air
    risk 0.09cvss —epss 0.74

    Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to…

  • CVE-2015-0336Mar 13, 2015
    Adobe Inc.
    Flashplayer
    risk 0.09cvss —epss 0.70

    Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0334.

  • CVE-2015-0318Feb 6, 2015
    Adobe Inc.
    Flashplayer
    risk 0.09cvss —epss 0.75

    Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than…

  • CVE-2014-0514Apr 15, 2014
    Adobe Inc.
    Reader
    risk 0.09cvss —epss 0.72

    The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.

  • CVE-2013-5331Dec 11, 2013
    Adobe Inc.
    Air
    risk 0.09cvss —epss 0.72

    Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to…

  • CVE-2013-2730May 16, 2013
    Adobe Inc.
    Acrobat
    risk 0.09cvss —epss 0.79

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733.

  • CVE-2013-3336May 9, 2013
    Adobe Inc.
    Coldfusion
    risk 0.09cvss —epss 0.74

    Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.

  • CVE-2013-0634Feb 8, 2013
    Adobe Inc.
    Flashplayer
    risk 0.09cvss —epss 0.78

    Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary…

  • CVE-2010-3654Oct 29, 2010
    Adobe Inc.
    Acrobat
    risk 0.09cvss —epss 0.70

    Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute…

  • CVE-2010-3653Oct 26, 2010
    Adobe Inc.
    Shockwave Player
    risk 0.09cvss —epss 0.75

    The Director module (dirapi.dll) in Adobe Shockwave Player before 11.5.9.615 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted rcsL chunk containing a field whose value is used as a pointer…

  • CVE-2010-1240Apr 5, 2010
    Adobe Inc.
    Acrobat
    risk 0.09cvss —epss 0.74

    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was…

  • CVE-2009-4195Dec 4, 2009
    Adobe Inc.
    Illustrator
    risk 0.09cvss —epss 0.71

    Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

  • CVE-2009-3068Sep 4, 2009
    Adobe Inc.
    Robohelp
    risk 0.09cvss —epss 0.78

    Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file…

  • CVE-2008-5499Dec 18, 2008
    Adobe Inc.
    Flash Player For Linux
    risk 0.09cvss —epss 0.79

    Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.

  • CVE-2015-5560Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.08cvss —epss 0.66

    Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-3088May 13, 2015
    Adobe Inc.
    Air
    risk 0.08cvss —epss 0.62

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows…

  • CVE-2015-3080May 13, 2015
    Adobe Inc.
    Air
    risk 0.08cvss —epss 0.57

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows…

  • CVE-2009-2990Oct 19, 2009
    Adobe Inc.
    Acrobat
    risk 0.08cvss —epss 0.69

    Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.

  • CVE-2007-6019Apr 9, 2008
    Adobe Inc.
    Flash
    risk 0.08cvss —epss 0.60

    Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.

  • CVE-2007-3456Jul 11, 2007
    Adobe Inc.
    Flashplayer
    risk 0.08cvss —epss 0.56

    Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a…

  • CVE-2015-5574Sep 22, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.46

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to…

  • CVE-2015-5540Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.46

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5539Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.46

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5134Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5133Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5132Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5131Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.51

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified…

  • CVE-2015-5130Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-5127Aug 14, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.50

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via…

  • CVE-2015-3093May 13, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.48

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary…

  • CVE-2015-3089May 13, 2015
    Adobe Inc.
    Air
    risk 0.07cvss —epss 0.48

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary…

  • CVE-2009-3958Jan 13, 2010
    Adobe Inc.
    Acrobat
    risk 0.07cvss —epss 0.53

    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute…

  • CVE-2008-2549Jun 4, 2008
    Adobe Inc.
    Acrobat
    risk 0.07cvss —epss 0.53

    Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf.

  • CVE-2007-0071Apr 9, 2008
    Adobe Inc.
    Flashplayer
    risk 0.07cvss —epss 0.93

    Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and…

  • CVE-2007-2365Apr 30, 2007
    Adobe Inc.
    Photoshop
    risk 0.07cvss —epss 0.46

    Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

  • CVE-2007-0046Jan 3, 2007
    Adobe Inc.
    Acrobat
    risk 0.07cvss —epss 0.56

    Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request…

  • CVE-2007-0044Jan 3, 2007
    Adobe Inc.
    Acrobat
    risk 0.07cvss —epss 0.56

    Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following…

  • CVE-2015-8434Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8431Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8430Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8429Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8428Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8427Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

  • CVE-2015-8426Dec 10, 2015
    Adobe Inc.
    Air
    risk 0.06cvss —epss 0.43

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows…

Page 128 of 158