CVE-2015-0308

no score yetEPSS 7.2%

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

EPSS: 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2015-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:adobe_air
adobe:adobe_air_sdk
adobe:adobe_air_sdk_and_compiler
adobe:flash_player

References

http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
http://secunia.com/advisories/62177
http://secunia.com/advisories/62187
http://secunia.com/advisories/62252
http://secunia.com/advisories/62371

Check your stack JSON