Vulnerability details

CVE-2015-0313

Actively exploited
Adobe Flash Player
CVSS 3.1
7.8High

Official description

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

18
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2015-02-02
Last updated
2025-11-17
State
Published
Assigner (CNA)
adobe

CISA KEV catalog

Date added
2022-04-13
Due date
2022-05-04
Used in ransomware
Unknown

Exploit prediction (EPSS)

95.34%
Probability of exploitation in 30 days
99.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
Active
Technical impact
Total

Weaknesses (CWE)

  • CWE-416
    Use After Free