peter bassill · operator
$ cve CVE-2015-0311 JSON

CVE-2015-0311 KEV EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 85.6% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-04.

Description

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS85.59% — more likely to be exploited than 100% of all CVEs
On CISA KEVyes — remediate by 2022-05-04
Public exploityes
Published2015-01-23
Last modified2026-06-17

CISA KEV

NameAdobe Flash Player Remote Code Execution Vulnerability
Added2022-04-13
Due2022-05-04
Vendor / productAdobe / Flash Player
Ransomware usenone reported

Affected (14)

VendorProduct
adobeflash player
applemac os x
linuxlinux kernel
microsoftedge
microsoftinternet explorer
microsoftwindows
microsoftwindows 10 1507
microsoftwindows 8
microsoftwindows 8.1
microsoftwindows rt
microsoftwindows rt 8.1
microsoftwindows server 2012
suselinux enterprise desktop
suselinux enterprise workstation extension

Public exploits

SourceTitleDate
exploit-dbAdobe Flash Player - ByteArray UncompressViaZlibVariant Use-After-Free (Metasploit)2015-03-12

References

→ the Explorer  ·  watch your stack  ·  NVD