Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb15 04 | — | Upgrade to Adobe Flash Player version 16.0.0.305 for WindowsUpgrade to Adobe Flash Player version 16.0.0.305 for Mac OS XUpgrade to Adobe Flash Player version 13.0.0.269 for Mac OS XUpgrade to Adobe Flash Player version 13.0.0.269 for WindowsUpgrade to Adobe Flash Player version 11.2.202.442 for Linux | Feb 5, 2015 | Feb 5, 2015 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Feb 5, 2015 |
| Suse | — | Upgrade flash-player-kde4Upgrade flash-playerUpgrade flash-player-gnome | Dec 18, 2015 | Feb 5, 2015 |
| Ubuntu | — | Upgrade adobe-flashpluginUpgrade flashplugin-nonfree | Nov 19, 2024 | Feb 6, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub