CVE-2015-8454

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…

published December 10, 2015

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability lurks in Adobe Flash Player that could allow attackers to execute arbitrary code — all from seemingly harmless vectors! 🔥 Think of it like a waiter who serves an empty plate to a customer after their meal is done, allowing anyone nearby to sneak in and swap it for something dangerous—without anyone noticing! If exploited, an attacker could potentially take control of your system, running malicious code at will. This could lead to data breaches, unauthorized access to sensitive information, or even complete system compromise—yikes!

Put simply

Think of it like a waiter who serves an empty plate to a customer after their meal is done, allowing anyone nearby to sneak in and swap it for something dangerous—without anyone noticing! This use-after-free vulnerability occurs when memory is accessed after it has been freed, allowing attackers to manipulate the application’s execution flow and inject arbitrary code.

What to do

If exploited, an attacker could potentially take control of your system, running malicious code at will. This could lead to data breaches, unauthorized access to sensitive information, or even complete system compromise—yikes! Update Adobe Flash Player to version 18.0.0.268 or later, or 20.0.0.228 for the 20.x series on Windows and OS X. For Linux, ensure you're using version 11.2.202.554 or later. Don't forget to apply the latest updates for Adobe AIR as well! You can tackle this head-on! Follow these steps to secure your systems and boost your security hero status! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06522 · 93.8th percentile
Published
2015-12-10T02:00Z
EPSS history
Timeline
  • 10 DEC 02:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux…
    cvelistv5