CVE-2015-0310

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://helpx.adobe.com/security/products/flash-player/apsb15-02.htmlPatch, Vendor Advisory
http://secunia.com/advisories/62452Broken Link
http://secunia.com/advisories/62601Broken Link
http://secunia.com/advisories/62660Broken Link
http://secunia.com/advisories/62740Broken Link
http://security.gentoo.org/glsa/glsa-201502-02.xmlThird Party Advisory
http://www.securityfocus.com/bid/72261Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031609Broken Link, Third Party Advisory, VDB Entry
http://helpx.adobe.com/security/products/flash-player/apsb15-02.htmlPatch, Vendor Advisory
http://secunia.com/advisories/62452Broken Link
http://secunia.com/advisories/62601Broken Link
http://secunia.com/advisories/62660Broken Link
http://secunia.com/advisories/62740Broken Link
http://security.gentoo.org/glsa/glsa-201502-02.xmlThird Party Advisory
http://www.securityfocus.com/bid/72261Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031609Broken Link, Third Party Advisory, VDB Entry
https://github.com/cisagov/vulnrichment/issues/196Issue Tracking
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0310US Government Resource

Timeline

Published: Jan 23, 2015
Last modified: Jun 17, 2026
Added to CISA KEV: May 25, 2022
NVD status: Analyzed

Related CVEs from 2015