Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Adobe Flash Player can run code or crash

CVE-2015-0316 · published 11 years ago
Summary

Older versions of Adobe Flash Player for Windows, macOS and Linux can be tricked into executing unwanted programs or shutting down unexpectedly. This happens because the player mishandles certain data, allowing attackers to take control of the computer or cause it to stop working. Update Flash Player to the latest version or uninstall it if it is no longer needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe flash_player <= 11.2.202.440
<= 13.0.0.264
14.0.0.125
14.0.0.145
14.0.0.176
14.0.0.179
15.0.0.152
15.0.0.167
15.0.0.189
15.0.0.223
15.0.0.239
15.0.0.246
4 more version ranges
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Original advisory text
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of ser...
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
6% chance of attack within 30 days
Timeline
Published6 Feb 2015
Updated1 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-0316 · NVD
Track software like this
Free during beta