Use-After-Free Vulnerability in Adobe Flash Player and Adobe AIR
CVE-2015-8425

Currently unrated

Key Information:

Vendor
Adobe
Status
Air
Vendor
CVE Published:
10 December 2015

Summary

A use-after-free vulnerability exists in Adobe Flash Player and Adobe AIR, which can potentially allow remote attackers to execute arbitrary code on affected installations. Exploiting this flaw can occur through various unspecified vectors, raising significant security concerns for users on Windows, OS X, and Linux platforms. Users are advised to apply the latest updates to mitigate risks associated with this vulnerability.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM

EPSS Score

74% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.