CVE-2015-7628
Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
- EPSS
- 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:air
- adobe:air_sdk
- adobe:air_sdk_\&_compiler
- adobe:flash_player
References
- http://jvn.jp/en/jp/JVN22533124/index.html
- http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-005234.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00013.html