VULNERABILITY INTELLIGENCE
CVE-2015-7645
CVSS score7.8 HIGH
EPSS probability65.34%
CISA KEVKnown exploited vulnerability
Published2015-10-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Adobe Flash Player Arbitrary Code Execution Vulnerability
Vendor / product: Adobe / Flash Player
Description
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.
Primary references
- psirt@adobe.com — Broken Link
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Mailing List, Third Party Advisory
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@adobe.com — Broken Link, Patch, Vendor Advisory
- psirt@adobe.com — Broken Link