CVE-2015-5539

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…

published August 14, 2015

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Adobe Flash Player could let attackers execute arbitrary code just like a magician pulling a rabbit out of a hat! 🎩 Think of it like a waiter who forgets to take back a plate after serving a dish. If the plate is still on the table, someone might use it to serve something entirely different—without permission! This vulnerability could allow malicious actors to perform actions on your system that you didn't authorize, which could be absolutely devastating for your data and privacy. Imagine them taking full control without you even noticing!

Put simply

Think of it like a waiter who forgets to take back a plate after serving a dish. If the plate is still on the table, someone might use it to serve something entirely different—without permission! The use-after-free vulnerability arises when Adobe Flash Player and associated products miss clearing out memory after it is freed, allowing attackers to manipulate the program's flow and execute their own code.

What to do

This vulnerability could allow malicious actors to perform actions on your system that you didn't authorize, which could be absolutely devastating for your data and privacy. Imagine them taking full control without you even noticing! To protect yourself, ensure you're using version 18.0.0.232 or later for Flash Player on Windows and OS X, or version 11.2.202.508 for Linux. Update Adobe AIR and its SDK to version 18.0.0.199 or higher as well. Don't wait—this is a crucial fix! You've got this! Follow the update steps and keep your system secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.45511 · 98.8th percentile
Published
2015-08-14T01:00Z
EPSS history
Timeline
  • 14 AUG 01:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
    cvelistv5