← Back

CVE-2015-8648

nvd nist
Published: Dec 28, 2015Modified: May 6, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8649, and CVE-2015-8650.

Affected (11)

Adobe
4 products
Air
Flash Player
Air Sdk
Air Sdk & Compiler
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Air
Up to 20.0.0.204
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Flash Player
Up to 18.0.0.268
Flash Player
Version 19.0.0.185
Flash Player
Version 19.0.0.207
Flash Player
Version 19.0.0.226
Flash Player
Version 19.0.0.245
Flash Player
Version 20.0.0.228
Flash Player
Version 20.0.0.235
Configuration C
2 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Air Sdk
Up to 20.0.0.204
Air Sdk & Compiler
Up to 20.0.0.204
Running on/withPlatform Versions
Apple
Iphone Os
All versions
Apple
Mac Os X
All versions
Google
Android
All versions
Microsoft
Windows
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player
Up to 11.2.202.554
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

References (26)

Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
Source: psirt@adobe.com
PatchVendor Advisory
Source: psirt@adobe.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.