{"id":"CVE-2015-3093","aliases":["EUVD-2015-3174","GHSA-h7r4-xwmg-vhmr","MGASA-2015-0218","RHSA-2015:1005","SUSE-SU-2015:0239-1","SUSE-SU-2015:0493-1","SUSE-SU-2015:0723-1","SUSE-SU-2015:0878-1","SUSE-SU-2015:0880-1","SUSE-SU-2015:1064-1","SUSE-SU-2015:1137-1","UBUNTU-CVE-2015-3093"],"status":"published","title":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X...","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.47615,"percentile":0.98853,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-119"],"published":"2014-11-14T12:52:02Z","modified":"2026-06-29T10:09:08Z","exploits":[{"source":"exploitdb","id":"EDB-37846","title":"Flash - Issues in DefineBitsLossless and DefineBitsLossless2 Leads to Using Uninitialized Memory","type":"dos","platform":"windows","date":"2015-08-19","verified":true,"url":"https://www.exploit-db.com/exploits/37846"}],"fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.460ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.460-1.mga4.nonfree"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.460-1.el5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.460-1.el5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.460-1.el6_6"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.460-83.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.460-83.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.460ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"air"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"http://www.securitytracker.com/id/1032285","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-09.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article","report"]},{"url":"https://security.gentoo.org/glsa/201505-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/37846/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1005.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74605","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3093","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/37846"},{"url":"https://github.com/advisories/GHSA-h7r4-xwmg-vhmr"},{"url":"https://advisories.mageia.org/MGASA-2015-0218.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15916","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1005","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1221067","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1005.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3078","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3078","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3079","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3079","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3080","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3080","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3082","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3083","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3083","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3084","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3085","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3086","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3087","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3087","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3087","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3088","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3088","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3088","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3090","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3090","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3091","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3093","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150239-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/824512","tags":["report"]},{"url":"https://bugzilla.suse.com/828810","tags":["report"]},{"url":"https://bugzilla.suse.com/839897","tags":["report"]},{"url":"https://bugzilla.suse.com/850220","tags":["report"]},{"url":"https://bugzilla.suse.com/854881","tags":["report"]},{"url":"https://bugzilla.suse.com/856386","tags":["report"]},{"url":"https://bugzilla.suse.com/858822","tags":["report"]},{"url":"https://bugzilla.suse.com/862288","tags":["report"]},{"url":"https://bugzilla.suse.com/865021","tags":["report"]},{"url":"https://bugzilla.suse.com/867808","tags":["report"]},{"url":"https://bugzilla.suse.com/872692","tags":["report"]},{"url":"https://bugzilla.suse.com/875577","tags":["report"]},{"url":"https://bugzilla.suse.com/877649","tags":["report"]},{"url":"https://bugzilla.suse.com/882187","tags":["report"]},{"url":"https://bugzilla.suse.com/886472","tags":["report"]},{"url":"https://bugzilla.suse.com/891688","tags":["report"]},{"url":"https://bugzilla.suse.com/895856","tags":["report"]},{"url":"https://bugzilla.suse.com/901334","tags":["report"]},{"url":"https://bugzilla.suse.com/905032","tags":["report"]},{"url":"https://bugzilla.suse.com/907257","tags":["report"]},{"url":"https://bugzilla.suse.com/909219","tags":["report"]},{"url":"https://bugzilla.suse.com/913057","tags":["report"]},{"url":"https://bugzilla.suse.com/914333","tags":["report"]},{"url":"https://bugzilla.suse.com/914463","tags":["report"]},{"url":"https://bugzilla.suse.com/915918","tags":["report"]},{"url":"https://bugzilla.suse.com/922033","tags":["report"]},{"url":"https://bugzilla.suse.com/927089","tags":["report"]},{"url":"https://bugzilla.suse.com/930677","tags":["report"]},{"url":"https://bugzilla.suse.com/934088","tags":["report"]},{"url":"https://bugzilla.suse.com/935701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3113","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150723-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150878-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150880-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151064-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3093","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3093","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","status":"published","published":"2015-05-13T10:00:00Z","modified":"2024-08-06T05:39:30.473Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3174","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","status":"published","published":"2015-05-13T10:00:00Z","modified":"2024-08-06T05:39:30Z","updated_at":"2026-11-03T02:22:09.620925Z"}],"ghsa":[{"id":"GHSA-h7r4-xwmg-vhmr","title":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X...","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","status":"published","published":"2022-05-17T01:06:00Z","modified":"2025-04-12T12:48:58Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:22.356916Z"}],"nvd":[{"id":"CVE-2015-3093","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","status":"published","published":"2015-05-13T11:00:23.533Z","modified":"2026-06-17T00:25:16.897Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"MGASA-2015-0218","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.460 contains fixes to critical security \nvulnerabilities found in earlier versions that could cause a crash and \npotentially allow an attacker to take control of the affected system.\n\nThis update resolves memory corruption vulnerabilities that could lead to \ncode execution (CVE-2015-3078, CVE-2015-3089, CVE-2015-3090, \nCVE-2015-3093).\n\nThis update resolves a heap overflow vulnerability that could lead to code \nexecution (CVE-2015-3088). \n\nThis update resolves a time-of-check time-of-use (TOCTOU) race condition \nthat could be exploited to bypass Protected Mode in Internet Explorer \n(CVE-2015-3081). \n\nThis update resolves validation bypass issues that could be exploited to \nwrite arbitrary data to the file system under user permissions \n(CVE-2015-3082, CVE-2015-3083, CVE-2015-3085).  \n\nThis update resolves an integer overflow vulnerability that could lead to \ncode execution (CVE-2015-3087). \n\nThis update resolves a type confusion vulnerability that could lead to code \nexecution (CVE-2015-3077, CVE-2015-3084, CVE-2015-3086).\n\nThis update resolves a use-after-free vulnerability that could lead to code \nexecution (CVE-2015-3080).\n\nThis update resolves memory leak vulnerabilities that could be used to \nbypass ASLR (CVE-2015-3091, CVE-2015-3092). \n\nThis update resolves a security bypass vulnerability that could lead to \ninformation disclosure (CVE-2015-3079), and provides additional hardening \nto protect against CVE-2015-3044.\n","status":"published","published":"2015-05-12T19:37:48Z","modified":"2026-04-16T06:22:48.015472826Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:1005","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T10:36:43Z","modified":"2026-06-29T10:09:08Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0239-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2025-05-02T04:03:57.228408Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0493-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:08:38.331818Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0723-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:31:32.604879Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0878-1","title":"Security update for flash-player","description":"The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues.\n\nThe following vulnerabilities were fixed (bsc#930677):\n* APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078,\nCVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082,\nCVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,\nCVE-2015-3087, CVE-2015-3088, CVE-2015-3089, CVE-2015-3090,\nCVE-2015-3091, CVE-2015-3092, CVE-2015-3093\n\nMore information can be found at the Adobe Security Bulletin APSB15-09:\nhttps://helpx.adobe.com/security/products/flash-player/apsb15-09.html","status":"published","published":"2015-05-13T18:52:06Z","modified":"2026-02-04T02:30:44.962848Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0880-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T02:39:45.191501Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1064-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:39:48.304838Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1137-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:11:51.763015Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-3093","description":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK \u0026 Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3090.","status":"published","published":"2015-05-13T11:00:00Z","modified":"2025-07-16T07:17:30.666114Z","updated_at":"2026-11-02T15:54:10.045446Z"}]}}