CVE-2015-5130

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…

published August 14, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Flash Player can lead to remote code execution, making it a surprisingly sneaky threat! ⚡ Think of it like a restaurant that accidentally serves a dish that was already sent back to the kitchen — instead of discarding it, the staff might unknowingly serve it again, leading to unexpected and potentially harmful situations! An attacker could exploit this flaw to run arbitrary code on a user's system, which could mean anything from stealing sensitive data to taking complete control of the machine. It's an all-you-can-eat buffet of possibilities for a malicious actor!

Put simply

Think of it like a restaurant that accidentally serves a dish that was already sent back to the kitchen — instead of discarding it, the staff might unknowingly serve it again, leading to unexpected and potentially harmful situations! This use-after-free vulnerability allows attackers to execute arbitrary code by manipulating freed memory in Adobe Flash Player, Adobe AIR, and related SDKs before specified versions. It’s a critical flaw that can easily lead to devastating consequences if left unaddressed.

What to do

An attacker could exploit this flaw to run arbitrary code on a user's system, which could mean anything from stealing sensitive data to taking complete control of the machine. It's an all-you-can-eat buffet of possibilities for a malicious actor! Upgrade Adobe Flash Player to version 18.0.0.232 or later for Windows and OS X, and version 11.2.202.508 or later for Linux. Ensure that you also update Adobe AIR and its SDKs to version 18.0.0.199 or later to patch this vulnerability effectively. You've got this! Follow these steps to secure your systems and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.50286 · 98.9th percentile
Published
2015-08-14T01:00Z
EPSS history
Timeline
  • 14 AUG 01:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
    cvelistv5