CVE-2015-0311KEV · OVERDUE

Adobe Flash Player Remote Code Execution Vulnerability

High · published January 23, 2015

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.7th percentile for exploit probability.

1633
days past CISA
deadline
CVSS v3.1
7.8
EPSS
86%
Percentile
99.7
In the wild
Confirmed
What it is

🚨 A mysterious vulnerability in Adobe Flash Player could let cyber villains run amok! ⚡ Think of it like a restaurant where the chef is cooking without checking the ingredient list—every questionable item gets a free pass into the dish, and diners could end up with a surprise they never ordered! If exploited, an attacker could potentially take control of affected systems, executing arbitrary code like a sneaky thief slipping into the back of a restaurant and messing with everything in the kitchen. This could lead to data breaches, system compromise, and a full-blown security incident!

Put simply

Think of it like a restaurant where the chef is cooking without checking the ingredient list—every questionable item gets a free pass into the dish, and diners could end up with a surprise they never ordered! This vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code through unknown vectors, affecting multiple versions across Windows, OS X, and Linux platforms.

What to do

If exploited, an attacker could potentially take control of affected systems, executing arbitrary code like a sneaky thief slipping into the back of a restaurant and messing with everything in the kitchen. This could lead to data breaches, system compromise, and a full-blown security incident! Immediately update Adobe Flash Player to the latest version. If you're still running affected versions (13.0.0.262 and below, or 14.x, 15.x, and 16.x before 16.0.0.287), prioritize this update to protect your systems from exploitation. Regularly check for patches in the future to keep your environment secure! You've got this! By staying proactive, you can keep your systems safe from these sneaky vulnerabilities! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.85589 · 99.7th percentile
Published
2015-01-23T21:00Z
KEV added
2022-04-13 · due 2022-05-04
EPSS history
Timeline
  • 13 APR 00:00Z
    Added to CISA KEV — remediate by May 4
    kev
  • 23 JAN 21:00Z
    Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on…
    cvelistv5