CVE-2015-5122
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
- Record
CVE-2015-5122- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
- Record
CVE-2015-5122- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2015-5137
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
- Record
EUVD-2015-5137- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9h3m-vp3m-35pw
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
- Record
GHSA-9h3m-vp3m-35pw- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CISA KEV No score
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
- Record
CVE-2015-5122- Weakness
- CWE-416
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5122
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
- Record
UBUNTU-CVE-2015-5122- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2015-0275 No score
Updated flash-player-plugin package fixes security vulnerabilities
Adobe Flash Player 11.2.202.491 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.
Adobe is aware of reports that exploits targeting these vulnerabilities have been published publicly.
This update resolves a use-after-free vulnerability that could lead to code execution (CVE-2015-5122).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2015-5123).
- Record
MGASA-2015-0275- Updated
- 2026-11-02
OSVSUSE-SU-2015:1255-1 No score
Security update for flash-player
flash-player was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752).
- CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).
- Record
SUSE-SU-2015:1255-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1258-1 No score
Security update for flash-player
flash-player was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752).
- CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).
- Record
SUSE-SU-2015:1258-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:4 From an advisory covering 2 CVEs |
before 11.2.202.491-1.mga4.nonfree | 11.2.202.491-1.mga4.nonfree |
flash-player-pluginMageia:5 From an advisory covering 2 CVEs |
before 11.2.202.491-1.mga5.nonfree | 11.2.202.491-1.mga5.nonfree |
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el5 | 0:11.2.202.491-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el5 | 0:11.2.202.491-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el6_6 | 0:11.2.202.491-1.el6_6 |
flash-playerSUSE:Linux Enterprise Desktop 12 From an advisory covering 2 CVEs |
before 11.2.202.491-96.1 | 11.2.202.491-96.1 |
flash-playerSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 2 CVEs |
before 11.2.202.491-96.1 | 11.2.202.491-96.1 |
flash-playerSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 2 CVEs |
before 11.2.202.491-0.11.1 | 11.2.202.491-0.11.1 |
flash-playerSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 2 CVEs |
before 11.2.202.491-0.11.1 | 11.2.202.491-0.11.1 |
flashplugin-nonfreeUbuntu:14.04:LTS |
before 11.2.202.481ubuntu0.14.04.2, plus listed versions 11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1 Show 24 moreShow less11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.111.2.202.418ubuntu0.14.04.111.2.202.424ubuntu0.14.04.111.2.202.425ubuntu0.14.04.111.2.202.429ubuntu0.14.04.111.2.202.438ubuntu0.14.04.111.2.202.440ubuntu0.14.04.111.2.202.442ubuntu0.14.04.111.2.202.451ubuntu0.14.04.111.2.202.457ubuntu0.14.04.111.2.202.460ubuntu0.14.04.111.2.202.466ubuntu0.14.04.111.2.202.468ubuntu0.14.04.111.2.202.481ubuntu0.14.04.1 |
11.2.202.481ubuntu0.14.04.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Adobe Flash opaqueBackground Use After Free | 2015-07-06 |
| Exploit-DB | Adobe Flash - opaqueBackground Use-After-Free (Metasploit) | 2015-07-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5122 is a critical vulnerability (CVSS 9.8) in Adobe Flash Player, published July 14, 2015. CISA lists it as known to be exploited, since April 13, 2022. EUVD reports exploitation since April 13, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 87.0%, the 99th percentile. Fixed in flashplugin-nonfree 11.2.202.481ubuntu0.14.04.2.
References
securitytracker.com/id/1032890
lists.opensuse.org/opensuse-security-announce/2015-07/msg00028.html
marc.info?l=bugtraq&m=144050155601375&w=2
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467
fireeye.com/blog/threat-research/2015/07/cve-2015-5122_-_seco.html
us-cert.gov/ncas/alerts/TA15-195A
Show 36 moreShow less
helpx.adobe.com/security/products/flash-player/apsb15-18.html
security.gentoo.org/glsa/201508-01
rapid7.com/db/modules/exploit/multi/browser/adobe_flash_opaque_background_uaf
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04796784
rhn.redhat.com/errata/RHSA-2015-1235.html
kb.cert.org/vuls/id/338736
exploit-db.com/exploits/37599
securityfocus.com/bid/75712
packetstormsecurity.com/files/132663/Adobe-Flash-opaqueBackground-Use-After-Free.html
perception-point.io/2018/04/11/breaking-cfi-cve-2015-5122-coop
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5122
github.com/cisagov/vulnrichment/issues/196
nvd.nist.gov/vuln/detail/CVE-2015-5122
advisories.mageia.org/MGASA-2015-0275.html
bugs.mageia.org/show_bug.cgi?id=16392
access.redhat.com/errata/RHSA-2015:1235
bugzilla.redhat.com/show_bug.cgi?id=1242216
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1235.json
cve.org/CVERecord?id=CVE-2015-5122
suse.com/support/update/announcement/2015/suse-su-20151255-1
bugzilla.suse.com/937752
ubuntu.com/security/CVE-2015-5122