← CVE Radar
CVE-2015-0311Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
9.8 CRITICALEPSS 85.58%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due May 4, 2022
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2015-0311
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Jan 23, 2015
- Last modified
- 2026-06-17 00:19 UTC
Affected Products
From NVD CPE configurations.
adobeflash player3 version ranges
- through 11.2.202.438
- through 13.0.0.262
- 14.0.0.125 before 16.0.0.287
suselinux enterprise desktop2 version ranges
- 11 sp3
- 12
suselinux enterprise workstation extension1 version range
- 12
microsoftinternet explorer2 version ranges
- 10
- 11
microsoftedge0 version ranges
No version detail published.
References
- helpx.adobe.com http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- helpx.adobe.com http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
- malware.dontneedcoffee.com http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
- secunia.com http://secunia.com/advisories/62432
- secunia.com http://secunia.com/advisories/62543
- secunia.com http://secunia.com/advisories/62650
- secunia.com http://secunia.com/advisories/62660
- secunia.com http://secunia.com/advisories/62740
- security.gentoo.org http://security.gentoo.org/glsa/glsa-201502-02.xml
- securityfocus.com http://www.securityfocus.com/bid/72283
- securitytracker.com http://www.securitytracker.com/id/1031597
- technet.microsoft.com https://technet.microsoft.com/library/security/2755801
- github.com https://github.com/cisagov/vulnrichment/issues/196
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0311