CVE-2015-8450

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…

published December 10, 2015

CVSS
—
EPSS
7%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A crafty use-after-free vulnerability in Adobe Flash Player could let attackers execute arbitrary code with a deceptive filters property! 🔥 Think of it like a library that still allows you to borrow a book that’s already been returned, letting someone else sneak in and write a whole new story without anyone noticing. This vulnerability can lead to unexpected and harmful actions mid-performance, just like an uninvited author in a script reading! If exploited, an attacker could execute malicious code on your system, leading to anything from stealing sensitive data to completely compromising your device. It's like allowing someone backstage at a concert to change the entire show — chaos could ensue!

Put simply

Think of it like a library that still allows you to borrow a book that’s already been returned, letting someone else sneak in and write a whole new story without anyone noticing. This vulnerability can lead to unexpected and harmful actions mid-performance, just like an uninvited author in a script reading! This use-after-free vulnerability in Adobe Flash Player occurs due to improper handling of a TextField object when a crafted filters property value is used, allowing arbitrary code execution.

What to do

If exploited, an attacker could execute malicious code on your system, leading to anything from stealing sensitive data to completely compromising your device. It's like allowing someone backstage at a concert to change the entire show — chaos could ensue! Update Adobe Flash Player to version 18.0.0.268 or later for Windows and OS X, and to version 20.0.0.228 or later for Linux. For Adobe AIR users, ensure you are on version 20.0.0.204 or higher. Don't wait — patch up to secure your systems! You've got this! With these updates, you'll lock down your systems and keep those pesky attackers at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06538 · 93.7th percentile
Published
2015-12-10T02:00Z
EPSS history
Timeline
  • 10 DEC 02:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…
    cvelistv5