Critical severity9.8CISA KEVNVD Advisory· Published Jan 23, 2015· Updated Apr 21, 2026
CVE-2015-0311
CVE-2015-0311
Description
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Affected products
7cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
16- technet.microsoft.com/library/security/2755801nvdPatchVendor Advisory
- helpx.adobe.com/security/products/flash-player/apsa15-01.htmlnvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.htmlnvdMailing ListThird Party Advisory
- malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.htmlnvdThird Party Advisory
- security.gentoo.org/glsa/glsa-201502-02.xmlnvdThird Party Advisory
- www.securityfocus.com/bid/72283nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1031597nvdBroken LinkThird Party AdvisoryVDB Entry
- helpx.adobe.com/security/products/flash-player/apsb15-03.htmlnvdBroken Link
- secunia.com/advisories/62432nvdBroken Link
- secunia.com/advisories/62543nvdBroken Link
- secunia.com/advisories/62650nvdBroken Link
- secunia.com/advisories/62660nvdBroken Link
- secunia.com/advisories/62740nvdBroken Link
- github.com/cisagov/vulnrichment/issues/196nvdIssue Tracking
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.