{"id":"CVE-2015-7653","aliases":["EUVD-2015-7556","GHSA-qh5x-5jfr-gf5p","MGASA-2015-0444","RHSA-2015:2023","RHSA-2015:2024","SUSE-SU-2015:1958-1","SUSE-SU-2015:1960-1","UBUNTU-CVE-2015-7653"],"status":"published","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06171,"percentile":0.93534,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-11-11T11:00:00Z","modified":"2026-06-29T10:10:29Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.548ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548-1.mga5.nonfree"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.548-1.el6_7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.548-1.el5"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.548-1.el5"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548-111.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548-111.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548-0.26.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"flash-player","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548-0.26.1"}]}],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.548ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1","11.2.202.429ubuntu0.14.04.1","11.2.202.438ubuntu0.14.04.1","11.2.202.440ubuntu0.14.04.1","11.2.202.442ubuntu0.14.04.1","11.2.202.451ubuntu0.14.04.1","11.2.202.457ubuntu0.14.04.1","11.2.202.460ubuntu0.14.04.1","11.2.202.466ubuntu0.14.04.1","11.2.202.468ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.1","11.2.202.481ubuntu0.14.04.2","11.2.202.491ubuntu0.14.04.1","11.2.202.508ubuntu0.14.04.1","11.2.202.521ubuntu0.14.04.1","11.2.202.535ubuntu0.14.04.1","11.2.202.540ubuntu0.14.04.2"]}],"products":[{"vendor":"adobe","product":"air"},{"vendor":"adobe","product":"air_sdk"},{"vendor":"adobe","product":"air_sdk_\\\u0026_compiler"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"http://www.securitytracker.com/id/1034111","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2024.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-28.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00071.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201511-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securityfocus.com/bid/77533","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2023.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-15-561","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7653","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qh5x-5jfr-gf5p"},{"url":"https://advisories.mageia.org/MGASA-2015-0444.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17127","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2023","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1280062","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2023.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7651","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7653","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7655","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7656","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7657","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7662","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8046","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2024","tags":["advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-25.html","tags":["article"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-27.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271966","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2024.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5569","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7626","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7626","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7630","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7630","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7631","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7631","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7632","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","tags":["advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsa15-05.html","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7647","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7648","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151958-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/954512","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8046","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151960-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7653","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-7653","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","status":"published","published":"2015-11-11T11:00:00Z","modified":"2024-08-06T07:58:59.797Z","updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-7556","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","status":"published","published":"2015-11-11T11:00:00Z","modified":"2024-08-06T07:58:59Z","updated_at":"2026-11-03T02:21:51.562291Z"}],"ghsa":[{"id":"GHSA-qh5x-5jfr-gf5p","title":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245...","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","status":"published","published":"2022-05-17T02:38:22Z","modified":"2023-01-27T05:05:54Z","updated_at":"2026-11-02T14:42:47.671932Z"}],"nvd":[{"id":"CVE-2015-7653","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","status":"published","published":"2015-11-11T12:59:52.047Z","modified":"2026-06-17T00:32:54.36Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:12.30866Z"}],"osv":[{"id":"MGASA-2015-0444","title":"Updated flash-player-plugin packages fix security vulnerability","description":"Adobe Flash Player 11.2.202.548 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow an\nattacker to take control of the affected system.\n\nThis update resolves a type confusion vulnerability that could lead to\ncode execution (CVE-2015-7659).\n\nThis update resolves a security bypass vulnerability that could be\nexploited to write arbitrary data to the file system under user\npermissions (CVE-2015-7662).\n\nThis update resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2015-7651, CVE-2015-7652, CVE-2015-7653,\nCVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658,\nCVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043,\nCVE-2015-8044, CVE-2015-8046).\n","status":"published","published":"2015-11-11T19:20:05Z","modified":"2026-04-16T06:23:57.2360602Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"RHSA-2015:2023","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:46:29Z","modified":"2026-06-29T10:10:28Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2024","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T09:46:35Z","modified":"2026-06-29T10:10:29Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1958-1","title":"Security update for flash-player","description":"The flash-player package was updated to fix the following security issues:\n\n- Security update to 11.2.202.548 (bsc#954512):\n  * APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653,\n    CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657,\n    CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661,\n    CVE-2015-7662, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043,\n    CVE-2015-8044, CVE-2015-8046\n","status":"published","published":"2015-11-11T12:27:03Z","modified":"2025-05-02T04:04:47.417254Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1960-1","title":"Security update for flash-player","description":"The flash-player package was updated to fix the following security issues:\n\n- Security update to 11.2.202.548 (bsc#954512):\n  * APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653,\n    CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657,\n    CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661,\n    CVE-2015-7662, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043,\n    CVE-2015-8044, CVE-2015-8046\n","status":"published","published":"2015-11-11T12:26:32Z","modified":"2025-05-02T04:04:47.479128Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-7653","description":"Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK \u0026 Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.","status":"published","published":"2015-11-11T12:59:00Z","modified":"2025-07-16T07:33:24.798395Z","updated_at":"2026-11-02T15:54:10.737723Z"}]}}