ZeroDay Findings
Sign inSign up

Findings

CVE-2015-0313

Adobe Flash Player Use-After-Free Vulnerability

Published Feb 2, 2015 · updated Jun 16, 2026 · adobe flash player

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 2, 2015 · Catalog

    Detected

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

  2. Apr 13, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. May 4, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date May 4, 2022

Affected

  • cpe adobe/flash playerversion unspecified
  • cpe microsoft/edgeversion unspecified
  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe opensuse/evergreen11.4
  • cpe opensuse/opensuse13.1
  • cpe opensuse/opensuse13.2
  • cpe suse/linux enterprise desktop11
  • cpe suse/linux enterprise desktop12
  • vendor Adobe Flash Playerversion unspecified

Sources

  • CISA KEVCVE-2015-0313

    Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.

    cisa.gov
  • CVE.orgCVE-2015-0313

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-0313

    30-day exploitation probability 95.3%

    first.org
  • Exploit Database36491

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database36579

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_windows/browser/adobe_flash_worker_byte_array_uaf

    Public module reference (great). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2015-0313

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015,

    nvd.nist.gov

References