VDB

CVE-2015-6679

CVE-2015-6679 PUBLISHED

Reported by adobe · Published September 22, 2015

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
air_sdk_\&_compileradobe18.0.0.180
airadobe18.0.0.199, 18.0.0.143
flash_playeradobe13.0.0.289, 11.2.202.508
flashplugin-nonfreeUbuntu:14.04:LTS11.2.202.521ubuntu0.14.04.1
air_sdkadobe18.0.0.199

Affected products

VendorProductVersions
n/an/an/a
n/an/a*

Timeline

  • Sep 22, 2015 CVE Published
  • Feb 4, 2022 EPSS Score (30 in total, the first dated here)
  • Apr 5, 2026 Security Advisory (6 in total, the first dated here)
  • Oct 12, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2015-6679
vulnetix vdb fixes CVE-2015-6679

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2015-6679/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›