{"id":"CVE-2015-5566","aliases":["EUVD-2015-5520","GHSA-8w96-4hm8-r2xg","RHSA-2015:1603","UBUNTU-CVE-2015-5566"],"status":"published","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06534,"percentile":0.93838,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-08-24T10:00:00Z","modified":"2026-06-29T10:09:52Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.508ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.508-1.el5"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.508-1.el5"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.508-1.el6_7"}]}],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.508ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.2","11.2.202.491ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"air"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-19.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article","report"]},{"url":"http://www.securitytracker.com/id/1033235","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1603.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5566","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8w96-4hm8-r2xg"},{"url":"https://access.redhat.com/errata/RHSA-2015:1603","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1252697","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1603.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5132","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5132","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5133","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5539","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5541","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5544","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5544","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5544","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5545","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5550","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5551","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5552","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5553","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5553","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5553","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5556","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5557","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5558","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5559","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5560","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5562","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5564","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5565","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5566","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5566","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2015-5566","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5566","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","status":"published","published":"2015-08-24T10:00:00Z","modified":"2024-08-06T06:50:02.882Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5520","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","status":"published","published":"2015-08-24T10:00:00Z","modified":"2024-08-06T06:50:02Z","updated_at":"2026-11-03T02:21:59.884926Z"}],"ghsa":[{"id":"GHSA-8w96-4hm8-r2xg","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","status":"published","published":"2022-05-14T03:58:42Z","modified":"2023-02-03T05:00:57Z","updated_at":"2026-11-02T14:52:53.034472Z"}],"nvd":[{"id":"CVE-2015-5566","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","status":"published","published":"2015-08-24T10:59:00.127Z","modified":"2026-06-17T00:29:21.32Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:08.998581Z"}],"osv":[{"id":"RHSA-2015:1603","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T10:37:37Z","modified":"2026-06-29T10:09:52Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"UBUNTU-CVE-2015-5566","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK \u0026 Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.","status":"published","published":"2015-08-24T10:59:00Z","modified":"2025-07-16T08:11:38.030299Z","updated_at":"2026-11-02T15:54:10.385269Z"}]}}