Use-After-Free Vulnerability in Adobe Flash Player and Adobe AIR
CVE-2015-8068

Currently unrated

Key Information:

Vendor
Adobe
Status
Air Sdk
Air Sdk \& Compiler
Vendor
CVE Published:
10 December 2015

Summary

A use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code. Exploitation can occur through unspecified vectors, compromising affected systems on Windows, OS X, and Linux. Users are urged to update to the latest versions to mitigate the risks posed by this vulnerability.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/78715
vdb-entryx_refsource_BID

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.