CVE-2015-8413 is a critical use-after-free vulnerability in Adobe Flash Player and Adobe AIR products across Windows, OS X, and Linux platforms. This flaw allows unauthenticated attackers to execute arbitrary code remotely with low attack complexity. With a CVSS score of 10.0 and a FAUCET Risk Score of 98/100, the vulnerability poses a severe threat, enabling complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an ExploitDB entry (EDB-39043) confirms the existence of public exploit code, and it received notable media coverage and community discussion at the time of its disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 19.0.0.241CPE matchmatch criteria | cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* | ||
<= 18.0.0.261CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
19.0.0.185CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:19.0.0.185:*:*:*:*:*:*:* | ||
19.0.0.207CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:19.0.0.207:*:*:*:*:*:*:* | ||
19.0.0.226CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:19.0.0.226:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.