Live › vulnerability › CVE-2015-0310
Go to dashboardAdobe Flash Player does not properly restrict discovery of memory addresses, which lets attackers bypass ASLR, a memory randomization defense. An attacker typically pairs this with another flaw to run code, and it is listed as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| adobe flash player | vendor | < 11.2.202.438 | 11.2.202.438 |
| adobe flash player | vendor | < 13.0.0.262 | 13.0.0.262 |
| adobe flash player | vendor | >= 14.0, < 16.0.0.287 | 16.0.0.287 |
| Adobe Flash Player | vendor | – | – |
Check whether Adobe Flash Player is installed on any machine, for example by looking for Flash Player plugin files in browser plugin directories or the installed program list.
Uninstall Adobe Flash Player and disconnect any system still using it, as Adobe Flash Player is end-of-life.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.
This page as .md · .json · in your agent: get_signal("CVE-2015-0310")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.