CVE-2015-8650
HighSummary
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.
Risk Assessment
Exploitation of this vulnerability could lead to remote code execution, posing a serious security threat to organizational systems. Attackers may gain full control over the compromised system.
Recommendation
It is recommended to update Adobe Flash Player and Adobe AIR to the latest versions to mitigate the risks associated with this vulnerability. Additionally, monitor and restrict the use of outdated software versions.
Other vulnerabilities in Adobe Flash Player, Adobe AIR, Adobe AIR SDK, Adobe AIR Compiler
See all- CVE-2016-0983High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. It also affects Adobe AIR before version 20.0.0.260 and Adobe AIR SDK and Compiler before version 20.0.0.260, allowing attackers to execute arbitrary code.
- CVE-2016-0982High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. Also affects Adobe AIR before version 20.0.0.260 and Adobe AIR SDK and Compiler before version 20.0.0.260.
- CVE-2015-8635High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.
- CVE-2015-4430High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux. It also affects Adobe AIR before version 18.0.0.180 and Adobe AIR SDK and Compiler before the same version, allowing attackers to execute arbitrary code.
Original NVD description (English source)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, and CVE-2015-8649.