Use-After-Free Vulnerability in Adobe Flash Player and Adobe AIR
CVE-2015-8404

Currently unrated

Key Information:

Vendor
Adobe
Status
Air
Vendor
CVE Published:
10 December 2015

Summary

A use-after-free vulnerability in Adobe Flash Player on Windows and OS X, as well as in Adobe AIR and its SDKs, could allow attackers to execute arbitrary code through unspecified vectors. This risk is present in several versions of the software, making it crucial for users to update to patched versions to mitigate the risk of exploitation.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/78715
vdb-entryx_refsource_BID

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.