Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb15 04 | — | Upgrade to Adobe Flash Player version 16.0.0.305 for Mac OS XUpgrade to Adobe Flash Player version 13.0.0.269 for Mac OS XUpgrade to Adobe Flash Player version 13.0.0.269 for WindowsUpgrade to Adobe Flash Player version 16.0.0.305 for WindowsUpgrade to Adobe Flash Player version 11.2.202.442 for Linux | Feb 23, 2015 | Feb 21, 2015 |
| Suse | — | Upgrade flash-playerUpgrade flash-player-gnome | Dec 18, 2015 | Feb 21, 2015 |
| Ubuntu | — | Upgrade flashplugin-nonfreeUpgrade adobe-flashplugin | Nov 19, 2024 | Feb 21, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub