{"id":"CVE-2015-7645","aliases":["EUVD-2015-7548","GHSA-67j3-p5pq-jgr7","MGASA-2015-0404","RHSA-2015:1913","RHSA-2015:2024","SUSE-SU-2015:1770-1","SUSE-SU-2015:1771-1","UBUNTU-CVE-2015-7645"],"status":"published","title":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.65339,"percentile":0.99262,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"published":"2015-10-15T10:00:00Z","modified":"2026-06-29T10:10:29Z","kev":{"date_added":"2022-03-03","due_date":"2022-03-24","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2022-03-03"},{"source":"kev","since":"2022-03-03"}],"exploits":[{"source":"exploitdb","id":"EDB-38490","title":"Adobe Flash - 'IExternalizable.writeExternal' Type Confusion","type":"dos","platform":"multiple","date":"2015-10-19","verified":true,"url":"https://www.exploit-db.com/exploits/38490"}],"fixes":[{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","fixed_in":["11.2.202.540-108.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","fixed_in":["11.2.202.540-108.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"flash-player","fixed_in":["11.2.202.540-0.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"flash-player","fixed_in":["11.2.202.540-0.23.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.535ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.540-1.mga5.nonfree"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.540-1.el6_7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.548-1.el5"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.548-1.el5"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.540-108.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.540-108.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.540-0.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.540-0.23.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.535ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.2","11.2.202.491ubuntu0.14.04.1","11.2.202.508ubuntu0.14.04.1","11.2.202.521ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"flash player"},{"vendor":"adobe","product":"flash_player"},{"vendor":"opensuse","product":"evergreen"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_from_rhui"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_workstation_extension"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-1913.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/38490/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2024.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsa15-05.html","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch","Vendor Advisory","article","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1033850","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/77081","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-27.html","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web","article"]},{"url":"https://security.gentoo.org/glsa/201511-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/134009/Adobe-Flash-IExternalizable.writeExternal-Type-Confusion.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-flash-zero-day-used-in-pawn-storm-campaign/","tags":["x_refsource_MISC","x_transferred","Broken Link","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7645","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","tags":["advisory"]},{"url":"https://www.exploit-db.com/exploits/38490"},{"url":"http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-flash-zero-day-used-in-pawn-storm-campaign"},{"url":"https://github.com/advisories/GHSA-67j3-p5pq-jgr7"},{"url":"https://advisories.mageia.org/MGASA-2015-0404.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16970","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1913","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271966","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1913.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7645","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7647","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7648","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2024","tags":["advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html","tags":["article"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-28.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280062","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2024.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5569","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7626","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7626","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7630","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7630","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7631","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7631","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7632","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7651","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7653","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7655","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7657","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7662","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8046","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151770-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/950474","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7645","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151771-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7645","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-7645","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","status":"published","published":"2015-10-15T10:00:00Z","modified":"2025-10-21T23:55:57.55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:35:44.744952Z"}],"euvd":[{"id":"EUVD-2015-7548","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","status":"published","published":"2015-10-15T10:00:00Z","modified":"2025-10-21T23:55:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-03-03","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-67j3-p5pq-jgr7","title":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","status":"published","published":"2022-05-17T02:38:22Z","modified":"2025-10-22T00:31:12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:03.556367Z"}],"kev":[{"id":"CVE-2015-7645","title":"Adobe Flash Player Arbitrary Code Execution Vulnerability","description":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","kev":{"date_added":"2022-03-03","due_date":"2022-03-24","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2015-7645","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","status":"published","published":"2015-10-15T10:59:10.53Z","modified":"2026-06-17T00:32:53.4Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:10.919251Z"}],"osv":[{"id":"UBUNTU-CVE-2015-7645","description":"Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","status":"published","published":"2015-10-15T10:59:00Z","modified":"2025-07-16T07:17:36.976396Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"MGASA-2015-0404","title":"Updated flash-player-plugin package fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.540 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow\nan attacker to take control of the affected system.\n\nThis update resolves type confusion vulnerabilities that could lead to\ncode execution (CVE-2015-7645, CVE-2015-7647, CVE-2015-7648).\n\nAn exploit for CVE-2015-7645 is being used in the wild.\n","status":"published","published":"2015-10-17T08:53:25Z","modified":"2026-04-16T06:25:11.829259021Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:1913","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:46:23Z","modified":"2026-06-29T10:10:20Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2024","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:46:35Z","modified":"2026-06-29T10:10:29Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1770-1","title":"Security update for flash-player","description":"flash-player was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).\n","status":"published","published":"2015-10-16T12:01:08Z","modified":"2026-02-04T04:35:07.238296Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1771-1","title":"Security update for flash-player","description":"flash-player was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).\n","status":"published","published":"2015-10-16T11:58:02Z","modified":"2026-02-04T03:46:19.508235Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}