{"id":"CVE-2015-3129","aliases":["EUVD-2015-3210","GHSA-x795-wgrc-m75q","MGASA-2015-0273","RHSA-2015:1214","SUSE-SU-2015:1211-1","UBUNTU-CVE-2015-3129"],"status":"published","title":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before...","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06744,"percentile":0.94004,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-07-08T19:43:00Z","modified":"2026-06-29T10:09:32Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.481ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.481-1.mga4.nonfree"}]}],"bundled":35},{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.481-1.mga5.nonfree"}]}],"bundled":35},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.481-1.el5"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.481-1.el5"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.481-1.el6_6"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.481-93.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.481-93.1"}]}],"bundled":35},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.481ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"air"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"http://www.securitytracker.com/id/1032810","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1214.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201507-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-16.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article","report"]},{"url":"http://www.securityfocus.com/bid/75590","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3129","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x795-wgrc-m75q"},{"url":"https://advisories.mageia.org/MGASA-2015-0273.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16325","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1214","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsa15-03.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1241173","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1214.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0578","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3114","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3115","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3117","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3119","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3120","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3122","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3123","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3124","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3124","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3125","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3128","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3128","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3129","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3132","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3132","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3135","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3135","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3135","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3136","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4430","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4432","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-4433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4433","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5117","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5117","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5118","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5118","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5124","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5124","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151211-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/937339","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5119","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3129","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3129","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","status":"published","published":"2015-07-09T16:00:00Z","modified":"2024-08-06T05:39:32.038Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3210","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","status":"published","published":"2015-07-09T16:00:00Z","modified":"2024-08-06T05:39:32Z","updated_at":"2026-11-03T02:22:09.179399Z"}],"ghsa":[{"id":"GHSA-x795-wgrc-m75q","title":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before...","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","status":"published","published":"2022-05-17T00:49:22Z","modified":"2023-02-03T05:02:33Z","updated_at":"2026-11-02T14:53:11.686558Z"}],"nvd":[{"id":"CVE-2015-3129","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","status":"published","published":"2015-07-09T16:59:16.04Z","modified":"2026-06-17T00:25:21.287Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:05.884985Z"}],"osv":[{"id":"MGASA-2015-0273","title":"Updated flash-player-plugin package fixes critical security vulnerabilities","description":"Adobe Flash Player 11.2.202.481 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow an\nattacker to take control of the affected system.\n\nAdobe is aware of a report that an exploit targeting CVE-2015-5119 has\nbeen publicly published. \n\nThis updates resolves heap buffer overflow vulnerabilities that could lead\nto code execution (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118).\n\nThis updates resolves memory corruption vulnerabilities that could lead to\ncode execution (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130,\nCVE-2015-3133, CVE-2015-3134, CVE-2015-4431).\n\nThis updates resolves null pointer dereference issues (CVE-2015-3126,\nCVE-2015-4429).\n\nThis updates resolves a security bypass vulnerability that could lead to\ninformation disclosure (CVE-2015-3114).\n\nThis updates resolves type confusion vulnerabilities that could lead to\ncode execution (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121,\nCVE-2015-3122, CVE-2015-4433).\n\nThis updates resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117,\nCVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,\nCVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119).\n\nThis updates resolves vulnerabilities that could be exploited to bypass\nthe same-origin-policy and lead to information disclosure (CVE-2014-0578,\nCVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116).\n","status":"published","published":"2015-07-09T08:09:20Z","modified":"2026-04-16T06:23:28.159055701Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:1214","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T10:36:52Z","modified":"2026-06-29T10:09:32Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1211-1","title":"Security update for flash-player","description":"flash-player was updated to fix 35 security issues.\n\nThese security issues were fixed:\n- CVE-2015-3135, CVE-2015-4432, CVE-2015-5118: Heap buffer overflow vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, CVE-2015-4431: Memory corruption vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3126, CVE-2015-4429: Null pointer dereference issues (bsc#937339).\n- CVE-2015-3114: A security bypass vulnerability that could lead to information disclosure (bsc#937339).\n- CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-4433: Type confusion vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2015-3118, CVE-2015-3124, CVE-2015-5117, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119: Use-after-free vulnerabilities that could lead to code execution (bsc#937339).\n- CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116: Vulnerabilities that could be exploited to bypass the same-origin-policy and lead to information disclosure (bsc#937339).\n  ","status":"published","published":"2015-07-08T19:43:00Z","modified":"2026-02-04T02:41:31.958671Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-3129","description":"Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK \u0026 Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.","status":"published","published":"2015-07-09T16:59:00Z","modified":"2025-07-16T08:11:28.872543Z","updated_at":"2026-11-02T15:54:10.045446Z"}]}}