{"id":"CVE-2015-8651","kind":"vulnerability","aliases":["CVE-2015-8651"],"related":[],"title":"Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and…","description":"Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","summary":"Adobe Flash Player has an integer overflow that lets an attacker run code on the victim's machine. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":9.3,"epss":0.67698,"exploited":true,"exploited_at":"2022-05-25T00:00:00+00:00","products":[{"name":"adobe air sdk","fixed":["20.0.0.233"],"affected":"< 20.0.0.233","ecosystem":"vendor"},{"name":"adobe air sdk \\& compiler","fixed":["20.0.0.233"],"affected":"< 20.0.0.233","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["11.2.202.559"],"affected":"< 11.2.202.559","ecosystem":"vendor"},{"name":"adobe air","fixed":["20.0.0.233"],"affected":"< 20.0.0.233","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["18.0.0.324"],"affected":"< 18.0.0.324","ecosystem":"vendor"},{"name":"adobe flash player","fixed":["20.0.0.267"],"affected":">= 19.0.0.185, < 20.0.0.267","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 5.0","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux server","fixed":[],"affected":"= 5.0","ecosystem":"vendor"},{"name":"redhat enterprise linux server","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux workstation","fixed":[],"affected":"= 5.0","ecosystem":"vendor"},{"name":"redhat enterprise linux workstation","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"opensuse evergreen","fixed":[],"affected":"= 11.4","ecosystem":"vendor"},{"name":"opensuse","fixed":[],"affected":"= 13.1","ecosystem":"vendor"},{"name":"opensuse","fixed":[],"affected":"= 13.2","ecosystem":"vendor"},{"name":"suse linux enterprise desktop","fixed":[],"affected":"= 11","ecosystem":"vendor"},{"name":"suse linux enterprise desktop","fixed":[],"affected":"= 12","ecosystem":"vendor"},{"name":"suse linux enterprise workstation extension","fixed":[],"affected":"= 12","ecosystem":"vendor"},{"name":"hp insight control","fixed":["7.6"],"affected":"< 7.6","ecosystem":"vendor"},{"name":"hp insight control server provisioning","fixed":["7.6"],"affected":"< 7.6","ecosystem":"vendor"},{"name":"hp matrix operating environment","fixed":[],"affected":"= 7.6","ecosystem":"vendor"},{"name":"hp system management homepage","fixed":["7.6"],"affected":"< 7.6","ecosystem":"vendor"},{"name":"hp systems insight manager","fixed":["7.6"],"affected":"< 7.6","ecosystem":"vendor"},{"name":"hp version control repository manager","fixed":["7.6"],"affected":"< 7.6","ecosystem":"vendor"},{"name":"Adobe Flash Player","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe-flash-player","browsers","exploited","macos","runtime","windows"],"not_affected_if":["no-flash-installed"],"how_to_check":"Check whether Adobe Flash Player is installed on any machine or browser the team uses.","fix":"Remove Adobe Flash Player; it is end-of-life and no longer receives security updates.","status":"open","published_at":"2015-12-28T23:59:19+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:41+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T21:15:41Z","model":"claude-haiku-5-5","output":{"fix":"Remove Adobe Flash Player; it is end-of-life and no longer receives security updates.\nunknown","reach":"internet","impact":"high","summary":"Adobe Flash Player has an integer overflow that lets an attacker run code on the victim's machine. CISA lists it as actively exploited in the wild.","category":"runtime","who_cares":["adobe-flash-player","windows","macos","browsers"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the victim's machine via crafted Flash content","analyst_note":"Confirm affected and fixed versions and the user-interaction requirement from Adobe's advisory for CVE-2015-8651; the sources here do not give them.","how_to_check":"Check whether Adobe Flash Player is installed on any machine or browser the team uses.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["no-flash-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000464,"input_tokens":2816,"output_tokens":364,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2015':23A,26A '-8651':24A,27A '11.2.202.559':174C '18.0.0.324':8A,158C '19':10A,160C '20':13A,163C '20.0.0.233':180C,185C,192C '20.0.0.267':16A,166C 'activ':146B 'adob':4A,116B,124B,154C,177C,181C,187C 'adobe':28A,31A,35A,38A,40A,43A,112A 'adobe-flash-play':115B 'air':29A,32A,39A,178C,182C,188C 'allow':193C 'arbitrari':197C 'attack':134B,194C 'browser':119B 'cisa':142B 'code':136B,198C 'compil':190C 'compiler':34A 'control':89A,92A,109A 'cve':22A,25A 'desktop':49A,53A,77A,81A 'enterprise':47A,51A,55A,59A,63A,67A,76A,80A,84A 'environment':98A 'evergreen':71A 'execut':196C 'exploit':120B,147B 'extension':86A 'flash':5A,36A,41A,44A,113A,117B,125B,155C 'homepage':102A 'hp':87A,90A,95A,99A,103A,107A 'insight':88A,91A,105A 'integ':1A,129B,151C 'let':132B 'linux':48A,52A,56A,60A,64A,68A,75A,79A,83A,176C 'list':143B 'machin':141B 'maco':121B 'management':101A 'manager':106A,111A 'matrix':96A 'opensuse':70A,72A,73A 'operating':97A 'os':20A,170C 'overflow':2A,130B,152C 'player':6A,37A,42A,45A,114A,118B,126B,156C 'provisioning':94A 'redhat':46A,50A,54A,58A,62A,66A 'repository':110A 'run':135B 'runtim':122B 'sdk':30A,33A,183C,189C 'server':57A,61A,93A 'suse':74A,78A,82A 'system':100A 'systems':104A 'unspecifi':200C 'vector':201C 'version':108A 'via':199C 'victim':139B 'wild':150B 'window':18A,123B,168C 'workstation':65A,69A,85A 'x':11A,14A,21A,161C,164C,171C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2015-12-28T23:59:19+00:00","kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2015-8651","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-8651","severity":null,"published_at":"2022-05-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2015-8651","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-8651","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2015-8651","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","severity":null,"published_at":"2015-12-28T23:59:19+00:00","modified_at":"2026-06-17T00:34:57+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}