cyfenced.com →

[ CVE-2015-8651 · Published 28 Dec 2015 ]

Adobe Flash Player Integer Overflow Vulnerability

Exploited · CISA KEV CVSS 8.8 EPSS 68%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-05-25
  • EPSS: 68% chance of exploitation in the next 30 days (higher than 99% of CVEs)

[ Description ]Official description

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

CISA: Integer overflow in Adobe Flash Player allows attackers to execute code.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 15 Jun 2022): The impacted product is end-of-life and should be disconnected if still in use.

[ References ]References