CVE-2015-0315 — Vulnetix

CVE-2015-0315 PUBLISHED

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.

EPSS 3.90% · 88.5th percentile

Risk Scores

EPSS Score

3.90%

88.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:14.04:LTS	flashplugin-nonfree	0, 11.2.202.327ubuntu0.13.10.1, 11.2.202.335ubuntu1

Exploit Intelligence

Use after free during the StageVideoAvailabilityEvent can result in arbitrary code execution (hackerone)
Use after free during the StageVideoAvailabilityEvent can result in arbitrary code execution (hackerone)

Timeline

Feb 6, 2015 CVE Published
Mar 25, 2015 PoC Published
Feb 4, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Jun 11, 2023 EPSS Score
Mar 18, 2025 EPSS Score
Mar 29, 2025 EPSS Score
Mar 30, 2025 EPSS Score
Apr 13, 2025 EPSS Score
Apr 14, 2025 EPSS Score
Apr 23, 2025 EPSS Score
May 1, 2025 EPSS Score

References

https://ubuntu.com/security/CVE-2015-0315 third-party-advisory
https://helpx.adobe.com/security/products/flash-player/apsb15-04.html third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2015-0315 third-party-advisory

Open in Interactive Console →