CVE-2015-8649

🗓️ 28 Dec 2015 23:00:00Reported by adobeType

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors

Reporter	Title	Published	Views	Family All 63
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt58	29 Dec 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt58	29 Dec 201500:00	–	altlinux
FreeBSD	flash -- multiple vulnerabilities	28 Dec 201500:00	–	freebsd
Tenable Nessus	Flash Player < 20.0.0.267 Multiple Vulnerabilities (APSB16-01)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 20.0.0.233 Multiple Vulnerabilities (APSB16-01)	8 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)	29 Dec 201500:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 20.0.0.235 Multiple Vulnerabilities (APSB16-01)	29 Dec 201500:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (84c7ea88-bf04-4bdc-973b-36744bf540ab)	30 Dec 201500:00	–	nessus
Tenable Nessus	GLSA-201601-03 : Adobe Flash Player: Multiple vulnerabilities	27 Jan 201600:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)	29 Dec 201500:00	–	nessus

NVD

Node

adobe flash_playerRange≤18.0.0.268

adobe flash_playerMatch19.0.0.185

adobe flash_playerMatch19.0.0.207

adobe flash_playerMatch19.0.0.226

adobe flash_playerMatch19.0.0.245

adobe flash_playerMatch20.0.0.228

adobe flash_playerMatch20.0.0.235

AND

apple mac_os_x

microsoft windows

Node

adobe air_sdkRange≤20.0.0.204

adobe air_sdk_&_compilerRange≤20.0.0.204

AND

Node

adobe airRange≤20.0.0.204

AND

apple mac_os_x

google android

microsoft windows

Node

adobe flash_playerRange≤11.2.202.554

AND

linux linux_kernel

Source	Link
helpx	www.helpx.adobe.com/security/products/flash-player/apsb16-01.html
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html
security	www.security.gentoo.org/glsa/201601-03
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-653
rhn	www.rhn.redhat.com/errata/RHSA-2015-2697.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

06 May 2026 22:30Current

9.1High risk

Vulners AI Score9.1

CVSS 38.8

CVSS 29.3

EPSS0.03298