Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Adobe Flash Player lets attackers run code or crash

CVE-2015-0333 · published 11 years ago
Summary

Versions of Adobe Flash Player prior to certain updates on Windows, macOS and Linux can be tricked into running malicious programs or stopping working altogether. This occurs because of a memory handling flaw that can be exploited without the user’s knowledge. Update Flash Player to the latest version or disable it if it is no longer needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe flash_player <= 13.0.0.264
14.0.0.125
14.0.0.145
14.0.0.176
14.0.0.179
15.0.0.152
15.0.0.167
15.0.0.189
15.0.0.223
15.0.0.239
15.0.0.246
16.0.0.235
5 more version ranges
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Original advisory text
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of ser...
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0335, and CVE-2015-0339.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
6% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published13 Mar 2015
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2015-0333 · NVD
Track software like this
Free during beta