CVE-2015-0359

high · 10

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.

CVSS

92.1%

EPSS (exploit prob.)

100th

EPSS percentile

2015-04-14

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
adobe	flash_player	<= 13.0.0.264
adobe	flash_player	14.0.0.125
adobe	flash_player	14.0.0.145
adobe	flash_player	14.0.0.176
adobe	flash_player	14.0.0.179
adobe	flash_player	15.0.0.152
adobe	flash_player	15.0.0.167
adobe	flash_player	15.0.0.189
adobe	flash_player	15.0.0.223
adobe	flash_player	15.0.0.239
adobe	flash_player	15.0.0.246
adobe	flash_player	16.0.0.235
adobe	flash_player	16.0.0.257
adobe	flash_player	16.0.0.287
adobe	flash_player	16.0.0.296
adobe	flash_player	17.0.0.134
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	flash_player	<= 11.2.202.451
linux	linux_kernel	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-0359