CVE-2015-8420

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…

published December 10, 2015

CVSS
—
EPSS
43%
Percentile
98.7
In the wild
Unconfirmed
What it is

🚨 There’s a crafty use-after-free vulnerability in Adobe Flash Player that could let attackers execute arbitrary code without breaking a sweat! ⚡ Think of this vulnerability like a waiter who forgets to clear a table after a meal. When the next group sits down, they could accidentally use the leftover plates, leading to a disastrous mix-up! This means an attacker can potentially take control of an affected system, executing any code they desire. Imagine someone sneaking into your house and rearranging everything — they could lock you out of your own digital home!

Put simply

Think of this vulnerability like a waiter who forgets to clear a table after a meal. When the next group sits down, they could accidentally use the leftover plates, leading to a disastrous mix-up! This vulnerability allows an attacker to exploit the way memory is managed in Adobe Flash Player, specifically by accessing a portion of memory that was already freed, potentially leading to arbitrary code execution.

What to do

This means an attacker can potentially take control of an affected system, executing any code they desire. Imagine someone sneaking into your house and rearranging everything — they could lock you out of your own digital home! To protect against this vulnerability, users should update Adobe Flash Player to version 20.0.0.228 or later for Windows and OS X, or 11.2.202.554 for Linux. Make sure to regularly check for updates to your Adobe AIR SDK and Compiler as well! You’ve got the power to keep your systems secure! Update those versions and you’ll be back in the safety zone in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.43408 · 98.7th percentile
Published
2015-12-10T02:00Z
EPSS history
Timeline
  • 10 DEC 02:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…
    cvelistv5