CVE-2015-7631

CRITICAL 9.3CVE-2015-7631 · Published 15/10/2015 · updated 17/06/2026

In short

CVE-2015-7631 is a CRITICAL (CVSS 9.3) vulnerability affecting air (adobe), air sdk (adobe), air sdk & compiler (adobe).
Chance of exploitation in the next 30 days (EPSS): 7.1%, higher than 94.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
air adobe	`≤ 19.0.0.190`	No fix yet
air sdk adobe	`≤ 19.0.0.190`	No fix yet
air sdk & compiler adobe	`≤ 19.0.0.190`	No fix yet
flash player adobe	`≤ 11.2.202.521≤ 19.0.0.185`	No fix yet

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property, a different vulnerability than CVE-2015-7629, CVE-2015-7643, and CVE-2015-7644.

References

More vulnerabilities in air

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free