CVE-2015-0301

no score yetEPSS 5.2%

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.

EPSS: 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2015-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:adobe_air
adobe:adobe_air_sdk
adobe:adobe_air_sdk_and_compiler
adobe:flash_player

References

http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
http://secunia.com/advisories/62177
http://secunia.com/advisories/62187
http://secunia.com/advisories/62252
http://secunia.com/advisories/62371

Check your stack JSON