ZeroDay Findings
Sign inSign up

Findings

CVE-2015-0310

Adobe Flash Player ASLR Bypass Vulnerability

Published Jan 23, 2015 · updated Jun 16, 2026 · adobe flash player

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 23, 2015 · Catalog

    Detected

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

  2. May 25, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 15, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 15, 2022

Affected

  • cpe adobe/flash playerversion unspecified
  • vendor Adobe Flash Playerversion unspecified

Sources

  • CISA KEVCVE-2015-0310

    Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.

    cisa.gov
  • CVE.orgCVE-2015-0310

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-0310

    30-day exploitation probability 15.1%

    first.org
  • NIST NVDCVE-2015-0310

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspe

    nvd.nist.gov

References

CVE-2015-0310 · ZeroDay Findings