VULNERABILITY INTELLIGENCE
CVE-2015-0313
CVSS score9.8 CRITICAL
EPSS probability95.27%
CISA KEVKnown exploited vulnerability
Published2015-02-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Adobe Flash Player Use-After-Free Vulnerability
Vendor / product: Adobe / Flash Player
Description
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
Weakness classification
- CWE-416: Use After Free
Primary references
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Exploit, Third Party Advisory, VDB Entry
- psirt@adobe.com — Broken Link
- psirt@adobe.com — Broken Link
- psirt@adobe.com — Broken Link
- psirt@adobe.com — Broken Link
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory, VDB Entry