CVE-2015-0318

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute…

published February 6, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
75%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ A memory corruption flaw in Adobe Flash Player can allow attackers to take control of your system — a virtual free-for-all! Think of this like an unmonitored storage room where anyone can just walk in and mess with the files, without needing a badge or special permission. This vulnerability lets malicious actors exploit your system’s memory, causing chaos without a trace. If successfully exploited, an attacker could execute arbitrary code or crash the application, leading to denial of service. This could result in loss of important work, data breaches, and worst of all, leave your system vulnerable to future attacks!

Put simply

Think of this like an unmonitored storage room where anyone can just walk in and mess with the files, without needing a badge or special permission. This vulnerability lets malicious actors exploit your system’s memory, causing chaos without a trace. This vulnerability allows attackers to leverage memory corruption in Adobe Flash Player, affecting versions before 13.0.0.269 on Windows and OS X and before 11.2.202.442 on Linux, to execute code or crash the service.

What to do

If successfully exploited, an attacker could execute arbitrary code or crash the application, leading to denial of service. This could result in loss of important work, data breaches, and worst of all, leave your system vulnerable to future attacks! Upgrade Adobe Flash Player to the latest version immediately to close this vulnerability. Ensure your software is updated regularly to protect against these kinds of attacks. Consider disabling Flash entirely if it's not necessary to reduce exposure. You've got this! Patch up, and your security hero status will be firmly in place! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.75163 · 99.5th percentile
Published
2015-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute…
    cvelistv5