CVE-2015-3096
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X...
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
- Record
CVE-2015-3096- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
- Record
CVE-2015-3096- Updated
- 2026-11-02
EUVDEUVD-2015-3177 No score
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
- Record
EUVD-2015-3177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8qmf-pwhh-phx8 No score
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X...
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
- Record
GHSA-8qmf-pwhh-phx8- Weakness
- CWE-352
- Updated
- 2026-11-02
OSVMGASA-2015-0248 No score
Updated flash-player-plugin package fixes security vulnerability
Adobe Flash Player 11.2.202.468 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system.
Adobe is aware of reports that CVE-2015-3113 is being actively exploited in the wild via limited, targeted attacks. Systems running Internet Explorer for Windows 7 and below, as well as Firefox on Windows XP, are known targets.
This update resolves a heap buffer overflow vulnerability that could lead to code execution (CVE-2015-3113).
This update resolves a vulnerability (CVE-2015-3096) that could be exploited to bypass the fix for CVE-2014-5333.
This update resolves vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (CVE-2015-3098, CVE-2015-3099, CVE-2015-3102).
This update resolves a stack overflow vulnerability that could lead to code execution (CVE-2015-3100).
This update resolves a permission issue in the Flash broker for Internet Explorer that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2015-3101).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2015-3104).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2015-3105).
This update resolves use-after-free vulnerabilities that could lead to code execution (CVE-2015-3103, CVE-2015-3106, CVE-2015-3107).
This update resolves a memory leak vulnerability that could be used to bypass ASLR (CVE-2015-3108).
- Record
MGASA-2015-0248- Updated
- 2026-11-02
OSVSUSE-SU-2015:0239-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0239-1- Updated
- 2026-11-02
Show 7 moreShow less
OSVSUSE-SU-2015:0493-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0493-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0723-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0723-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0880-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:0880-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1043-1 No score
Security update for flash-player
The following issues are fixed by this updated: * CVE-2015-3096: These updates resolve a vulnerability that could be exploited to bypass the fix for CVE-2014-5333. * CVE-2015-3098, CVE-2015-3099, CVE-2015-3102:These updates resolve vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure. * CVE-2015-3100: These updates resolve a stack overflow vulnerability that could lead to code execution. * CVE-2015-3103, CVE-2015-3106, CVE-2015-3107: These updates resolve use-after-free vulnerabilities that could lead to code execution. * CVE-2015-3104: These updates resolve an integer overflow vulnerability that could lead to code execution. * CVE-2015-3105: These updates resolve a memory corruption vulnerability that could lead to code execution. * CVE-2015-3108: These updates resolve a memory leak vulnerability that could be used to bypass ASLR (CVE-2015-3108). (bsc#934088)
- Record
SUSE-SU-2015:1043-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1064-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:1064-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1137-1 No score
Security update for flash-player
flash-player was updated to version 11.2.202.418 to fix 18 security issues:
* Memory corruption vulnerabilities that could lead to code execution
(CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).
* Use-after-free vulnerabilities that could lead to code execution
(CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).
* A double free vulnerability that could lead to code execution
(CVE-2014-0574).
* Type confusion vulnerabilities that could lead to code execution
(CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,
CVE-2014-0590).
* Heap buffer overflow vulnerabilities that could lead to code
execution (CVE-2014-0582, CVE-2014-0589).
* An information disclosure vulnerability that could be exploited to
disclose session tokens (CVE-2014-8437).
* A heap buffer overflow vulnerability that could be exploited to
perform privilege escalation from low to medium integrity level
(CVE-2014-0583).
* A permission issue that could be exploited to perform privilege
escalation from low to medium integrity level (CVE-2014-8442).
Further information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14-24.html http://helpx.adobe.com/security/products/flash-player/apsb14-24.html .
Security Issues:
* CVE-2014-0576
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576>
* CVE-2014-0581
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581>
* CVE-2014-8440
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440>
* CVE-2014-8441
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441>
* CVE-2014-0573
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573>
* CVE-2014-0588
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588>
* CVE-2014-8438
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438>
* CVE-2014-0574
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574>
* CVE-2014-0577
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577>
* CVE-2014-0584
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584>
* CVE-2014-0585
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585>
* CVE-2014-0586
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586>
* CVE-2014-0590
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590>
* CVE-2014-0582
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582>
* CVE-2014-0589
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589>
* CVE-2014-8437
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437>
* CVE-2014-0583
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583>
* CVE-2014-8442
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442>
- Record
SUSE-SU-2015:1137-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3096 No score
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors.
- Record
UBUNTU-CVE-2015-3096- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:4 From an advisory covering 13 CVEs |
before 11.2.202.468-1.mga4.nonfree | 11.2.202.468-1.mga4.nonfree |
flash-player-pluginMageia:5 From an advisory covering 13 CVEs |
before 11.2.202.468-1.mga5.nonfree | 11.2.202.468-1.mga5.nonfree |
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 11 CVEs |
before 0:11.2.202.466-1.el5 | 0:11.2.202.466-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 11 CVEs |
before 0:11.2.202.466-1.el5 | 0:11.2.202.466-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 11 CVEs |
before 0:11.2.202.466-1.el6_6 | 0:11.2.202.466-1.el6_6 |
flash-playerSUSE:Linux Enterprise Desktop 12 From an advisory covering 11 CVEs |
before 11.2.202.466-86.1 | 11.2.202.466-86.1 |
flash-playerSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 11 CVEs |
before 11.2.202.466-86.1 | 11.2.202.466-86.1 |
flashplugin-nonfreeUbuntu:14.04:LTS |
before 11.2.202.466ubuntu0.14.04.1, plus listed versions 11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1 Show 21 moreShow less11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.111.2.202.418ubuntu0.14.04.111.2.202.424ubuntu0.14.04.111.2.202.425ubuntu0.14.04.111.2.202.429ubuntu0.14.04.111.2.202.438ubuntu0.14.04.111.2.202.440ubuntu0.14.04.111.2.202.442ubuntu0.14.04.111.2.202.451ubuntu0.14.04.111.2.202.457ubuntu0.14.04.111.2.202.460ubuntu0.14.04.1 |
11.2.202.466ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3096 is a medium vulnerability (CVSS 6.8) in Adobe Air, published November 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in flashplugin-nonfree 11.2.202.466ubuntu0.14.04.1.
References
helpx.adobe.com/security/products/flash-player/apsb15-11.html
securitytracker.com/id/1032519
lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html
security.gentoo.org/glsa/201506-01
Show 194 moreShow less
securityfocus.com/bid/75088
rhn.redhat.com/errata/RHSA-2015-1086.html
nvd.nist.gov/vuln/detail/CVE-2015-3096
github.com/advisories/GHSA-8qmf-pwhh-phx8
advisories.mageia.org/MGASA-2015-0248.html
bugs.mageia.org/show_bug.cgi?id=16139
access.redhat.com/errata/RHSA-2015:1086
bugzilla.redhat.com/show_bug.cgi?id=1229879
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1086.json
cve.org/CVERecord?id=CVE-2015-3096
suse.com/support/update/announcement/2015/suse-su-20150239-1
bugzilla.suse.com/824512
ubuntu.com/security/CVE-2015-3096
Left out here: 68 references. The JSON record has them.