CVE-2015-5557

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…

published August 14, 2015

CVSS
—
EPSS
45%
Percentile
98.8
In the wild
Unconfirmed
What it is

🚨 A tricky use-after-free vulnerability in Adobe Flash Player could let attackers execute arbitrary code with seemingly minimal effort! ⚡ Think of it like a restaurant that continues to serve food even after the chef has left the kitchen—what could go wrong with an unattended chef’s special? 🥴 If exploited, an attacker could potentially execute any code they like on the affected systems, leading to data breaches or even total system compromise. While no active exploits are confirmed, the mere potential for arbitrary code execution makes this vulnerability alarming!

Put simply

Think of it like a restaurant that continues to serve food even after the chef has left the kitchen—what could go wrong with an unattended chef’s special? 🥴 This use-after-free flaw occurs when Adobe Flash Player does not properly manage memory, allowing an attacker to access freed memory locations and execute their own code. It affects versions before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux.

What to do

If exploited, an attacker could potentially execute any code they like on the affected systems, leading to data breaches or even total system compromise. While no active exploits are confirmed, the mere potential for arbitrary code execution makes this vulnerability alarming! To protect yourself, ensure that Adobe Flash Player is updated to version 18.0.0.232 or later on Windows and OS X, or 11.2.202.508 or later on Linux. If you're using Adobe AIR or the SDK, update to version 18.0.0.199 or later as well! You’ve got this! Keep your software updated to stay ahead of the curve! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.44792 · 98.8th percentile
Published
2015-08-14T01:00Z
EPSS history
Timeline
  • 14 AUG 01:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe…
    cvelistv5