CVE-2015-03107.8HighCWE-200

CVE-2015-0310: Adobe Flash Player vulnerability

Adobe · Flash Player

Vendor fix available · Affected: Adobe Flash Player · Exploitation: in CISA KEV since 25 May 2022

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

ExploitationIn CISA KEV

In CISA KEVCISA KEV catalogue25 May 2022
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not established: not seen

15.1%probability of exploitation in the next 30 days

96th percentile

050100

Higher than 96% of scored CVEs

7.8HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
CISA KEV: Listed since 25 May 2022 · catalogue entry
Public check: No public nuclei template
Weakness: Information Exposure · Information Disclosure
Vendor: Adobe
Published: January 2015
Band: Exploited in the wild, January 2015

What changed

25 May 2022
CISA added it to the KEV catalogue CISA

CoverageNo articles yet

No CyberSIXT article names CVE-2015-0310 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.