Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb15 03 | — | Upgrade to Adobe Flash Player version 11.2.202.440 for LinuxUpgrade to Adobe Flash Player version 13.0.0.264 for Mac OS XUpgrade to Adobe Flash Player version 16.0.0.296 for WindowsUpgrade to Adobe Flash Player version 13.0.0.264 for WindowsUpgrade to Adobe Flash Player version 16.0.0.296 for Mac OS X | Jan 27, 2015 | Jan 23, 2015 |
| Freebsd | — | Upgrade linux-c6-flashpluginUpgrade linux-f10-flashplugin | Dec 10, 2025 | Jan 26, 2015 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Jan 23, 2015 |
| Suse | — | Upgrade flash-player-kde4Upgrade flash-player-gnomeUpgrade flash-player | Dec 18, 2015 | Jan 23, 2015 |
| Ubuntu | — | Upgrade flashplugin-nonfreeUpgrade adobe-flashplugin | Nov 19, 2024 | Jan 23, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub