CVE-2015-3043
CRITICAL KEVAdobe Flash Player <14.x - Memory Corruption
Title source: llmDescription
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/37536
References (12)
Scores
CVSS v3
9.8
EPSS
0.8742
EPSS Percentile
99.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2022-03-03
VulnCheck KEV
2015-04-13
InTheWild.io
2015-04-13
ENISA EUVD
EUVD-2015-3124
CWE
CWE-787
Status
published
Products (17)
adobe/flash_player
< 11.2.202.457
novell/suse_linux_enterprise_desktop
11.0 sp3
novell/suse_linux_enterprise_desktop
12.0
novell/suse_linux_enterprise_workstation_extension
12.0
opensuse/evergreen
11.4
opensuse/opensuse
13.1
opensuse/opensuse
13.2
redhat/enterprise_linux_desktop
5.0
redhat/enterprise_linux_desktop
6.0
redhat/enterprise_linux_eus
6.6
... and 7 more
Published
Apr 14, 2015
KEV Added
Mar 03, 2022
Tracked Since
Feb 18, 2026