CVE-2015-3080

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on…

published May 13, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free bug in Adobe Flash Player could unleash chaos, allowing attackers to execute arbitrary code without breaking a sweat! ⚡ Think of it like a restaurant where the kitchen keeps serving dishes that have been sent back — the chef just doesn't check if the ingredients are still safe to use. This oversight can lead to some pretty messy situations! If exploited, an attacker could potentially gain control, run malicious code, or even crash the application entirely. It’s a dangerous scenario that puts users at risk, and while the severity is classified as unknown, the potential for exploitation is unsettling.

Put simply

Think of it like a restaurant where the kitchen keeps serving dishes that have been sent back — the chef just doesn't check if the ingredients are still safe to use. This oversight can lead to some pretty messy situations! This use-after-free vulnerability occurs when the application tries to access memory that has already been freed, allowing an attacker to hijack control and execute arbitrary code through unspecified vectors.

What to do

If exploited, an attacker could potentially gain control, run malicious code, or even crash the application entirely. It’s a dangerous scenario that puts users at risk, and while the severity is classified as unknown, the potential for exploitation is unsettling. Upgrade Adobe Flash Player to version 13.0.0.289 or later, or 17.0.0.188 and ensure Adobe AIR and SDK are updated to at least version 17.0.0.172. It's critical to regularly check for updates to keep your systems secure! You've got this! Follow these steps, and you can tackle this vulnerability head-on. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.56552 · 99.1th percentile
Published
2015-05-13T10:00Z
EPSS history
Timeline
  • 13 MAY 10:00Z
    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on…
    cvelistv5