{"id":"CVE-2015-5119","kind":"vulnerability","aliases":["CVE-2015-5119"],"related":[],"title":"Adobe Flash Player: Adobe Flash Player Use-After-Free Vulnerability","description":"Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","summary":"Adobe Flash Player has a use-after-free bug in its ActionScript 3 ByteArray class. An attacker who gets a user to load crafted Flash content can run code on that user's machine.","severity":"critical","cvss":10.0,"epss":0.98618,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Adobe Flash Player","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-flash-player","browsers","exploited","macos","vendor","windows"],"not_affected_if":["flash-not-installed"],"how_to_check":"Check whether Adobe Flash Player is installed on any endpoint or browser, for example by looking for FlashPlayer plugin files in the browser plugin directories.","fix":"Remove Adobe Flash Player; the product is end-of-life and no longer receives patches. Disconnect any system that still needs it.","status":"open","published_at":"2015-07-08T14:59:05+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:06+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"vendor","confidence":0.8,"triage":{"at":"2026-10-23T21:24:06Z","model":"claude-haiku-5-5","output":{"fix":"Remove Adobe Flash Player; the product is end-of-life and no longer receives patches. Disconnect any system that still needs it.","reach":"internet","impact":"high","summary":"Adobe Flash Player has a use-after-free bug in its ActionScript 3 ByteArray class. An attacker who gets a user to load crafted Flash content can run code on that user's machine.","category":"vendor","who_cares":["adobe-flash-player","browsers","windows","macos"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the user's machine via crafted Flash content.","analyst_note":"Sources do not list fixed or affected versions; check the Adobe EOL notice and CISA KEV entry for the required action and deadline.","how_to_check":"Check whether Adobe Flash Player is installed on any endpoint or browser, for example by looking for FlashPlayer plugin files in the browser plugin directories.","needs_analyst":true,"not_affected_if":["flash-not-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"critical"},"cost_usd":0.000482,"input_tokens":2845,"output_tokens":394,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2015':13A,16A '-5119':14A,17A '11':99C '11.2.202.468':102C '13':84C '13.0.0.296':87C '14':89C '18.0.0.194':92C '2015':136C '3':43B,77C 'actionscript':42B,76C 'adob':1A,4A,22B,30B,81C 'adobe':18A 'adobe-flash-play':21B 'allow':105C 'arbitrari':110C 'as3':78C 'attack':47B,107C 'browser':25B 'bug':39B 'bytearray':44B,72C 'caus':113C 'class':45B,73C 'code':59B,111C 'content':56B,123C 'corrupt':119C 'craft':54B,121C 'cve':12A,15A 'denial':115C 'execut':109C 'exploit':26B,130C 'flash':2A,5A,19A,23B,31B,55B,82C,122C 'free':10A,38B,68C 'function':128C 'get':49B 'implement':79C 'juli':135C 'linux':104C 'load':53B 'machin':64B 'maco':27B 'memori':118C 'os':96C 'overrid':125C 'player':3A,6A,20A,24B,32B,83C 'remot':106C 'run':58B 'servic':117C 'use':8A,36B,66C 'use-after-fre':7A,35B,65C 'user':51B,62B 'valueof':127C 'vendor':28B 'via':120C 'vulner':11A,69C 'wild':133C 'window':29B,94C 'x':85C,90C,97C,100C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2015-07-08T14:59:05+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2015-5119","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5119","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:07+00:00","note":null},{"source":"epss","external_id":"CVE-2015-5119","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-5119","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2015-5119","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","severity":null,"published_at":"2015-07-08T14:59:05+00:00","modified_at":"2026-06-17T00:28:28+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}