CVE-2015-5574

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR…

published September 22, 2015

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Flash Player can let attackers execute arbitrary code—like giving someone the keys to a previously locked room! 🔥 Think of it like a restaurant that forgot to remove an old menu item from circulation. Even after you’ve ordered, if the kitchen mistakenly uses that old recipe, it may whip up something unexpected and potentially harmful! This flaw could allow an attacker to run malicious code on your system, leading to complete control over your machine. Imagine someone slipping into your home while you're distracted and rearranging everything — they could steal sensitive data, install malware, or wreak havoc before you even notice!

Put simply

Think of it like a restaurant that forgot to remove an old menu item from circulation. Even after you’ve ordered, if the kitchen mistakenly uses that old recipe, it may whip up something unexpected and potentially harmful! This use-after-free vulnerability in Adobe Flash Player occurs when the software continues to reference memory locations that have already been freed up, allowing for arbitrary code execution through unspecified vectors.

What to do

This flaw could allow an attacker to run malicious code on your system, leading to complete control over your machine. Imagine someone slipping into your home while you're distracted and rearranging everything — they could steal sensitive data, install malware, or wreak havoc before you even notice! To mitigate this vulnerability, ensure you update Adobe Flash Player to version 18.0.0.241 or later for Windows and OS X, and version 11.2.202.521 or later for Linux. Additionally, update Adobe AIR to version 19.0.0.190 or higher. Make it a habit to check for updates regularly! You’ve got this! Stay vigilant and keep your software updated for a safer experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.45511 · 98.8th percentile
Published
2015-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR…
    cvelistv5