CVE-2015-0311
KEVAdobe Flash Player Remote Code Execution Vulnerability
Description
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
CVSS 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPublishedJan 23, 2015
Last modifiedJun 17, 2026
Added to KEVApr 13, 2022
Remediation dueMay 4, 2022
References
- helpx.adobe.com/security/products/flash-player/apsa15-01.htmlVendor Advisory
- helpx.adobe.com/security/products/flash-player/apsb15-03.htmlBroken Link
- lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.htmlMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.htmlMailing ListThird Party Advisory
- malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.htmlThird Party Advisory
- secunia.com/advisories/62432Broken Link
- secunia.com/advisories/62543Broken Link
- secunia.com/advisories/62650Broken Link
- secunia.com/advisories/62660Broken Link
- secunia.com/advisories/62740Broken Link
- security.gentoo.org/glsa/glsa-201502-02.xmlThird Party Advisory
- securityfocus.com/bid/72283Broken LinkThird Party Advisory
0 recent articles mention this CVE
88
Risk assessment · Critical
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1637 days
- CVSS
- 9.8 CRITICAL
- EPSS (30-day exploit probability)
- 85.6% · top 1% of all CVEs
- Weakness
- NVD-CWE-noinfo
- Attack vector
- Network, remotely reachable
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.The impacted product is end-of-life and should be disconnected if still in use.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.