CVEvulnerability

CVE-2015-5574

10.0 HIGH Published 2015-09-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-09-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5581, CVE-2015-5584, and CVE-2015-6682.

Affected configurations

• adobe flash player (<= 13.0.0.289) • adobe flash player 14.0.0.125 • adobe flash player 14.0.0.145 • adobe flash player 14.0.0.176 • adobe flash player 14.0.0.179 • adobe flash player 15.0.0.152 • adobe flash player 15.0.0.167 • adobe flash player 15.0.0.189 • adobe flash player 15.0.0.223 • adobe flash player 15.0.0.239 • adobe flash player 15.0.0.246 • adobe flash player 16.0.0.235 • adobe flash player 16.0.0.257 • adobe flash player 16.0.0.287 • adobe flash player 16.0.0.296 • adobe flash player 17.0.0.134 • adobe flash player 17.0.0.169 • adobe flash player 17.0.0.188 • adobe flash player 17.0.0.190 • adobe flash player 17.0.0.191 • adobe flash player 18.0.0.160 • adobe flash player 18.0.0.194 • adobe flash player 18.0.0.203 • adobe flash player 18.0.0.209 • adobe flash player 18.0.0.232 • adobe flash player (<= 11.2.202.508) • adobe air (<= 18.0.0.143) • adobe air (<= 18.0.0.199) • adobe air sdk (<= 18.0.0.199) • adobe air sdk \& compiler (<= 18.0.0.180)

References