Flash Player < 19.0.0.226 RCE (APSB15-27) (Pawn Storm)

Versions of Adobe Flash Player prior to 19.0.0.226 are unpatched for the following vulnerabilities :

• A type confusion flaw is triggered when handling the ‘IExternalizable.writeExternal()’ method. (CVE-2015-7645)
• Two unspecified type confusion flaws may lead to arbitrary code execution. (CVE-2015-7647, CVE-2015-7648)

These flaws may allow a context-dependent attacker to potentially execute arbitrary code. Successful exploitation could result in a crash or potentially allowing an attacker to take control of the affected system.