CVE-2015-0310

7.8 highKEVEPSS 15%

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2022-05-25, due 2022-06-15
CWE: CWE-200
Published: 2015-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:flash_player

References

http://helpx.adobe.com/security/products/flash-player/apsb15-02.html
http://secunia.com/advisories/62452
http://secunia.com/advisories/62601
http://secunia.com/advisories/62660
http://secunia.com/advisories/62740

Check your stack JSON