Use-After-Free Vulnerability in Adobe Flash Player and Adobe AIR Products
CVE-2015-8062

Currently unrated

Key Information:

Vendor

Adobe
Status
Air
Vendor
CVE Published:
10 December 2015

What is CVE-2015-8062?

This vulnerability in Adobe Flash Player and Adobe AIR allows attackers to leverage a use-after-free flaw, potentially leading to arbitrary code execution on affected systems. The vulnerability exists in multiple versions of the software across various platforms, making it critical for users to update to the latest versions to mitigate the risk. Exploitation can occur through unspecified vectors, differentiating it from other documented vulnerabilities. Users are encouraged to regularly apply security patches and adhere to recommended practices to safeguard against such exploits.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/78715
vdb-entryx_refsource_BID

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.