CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2015-3113

CVSS 9.8v3.1pub. 2015-06-23upd. 2026-04-21

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Adobe Flash Player

    APP
    Adobe
    < 11.2.202.46814.0.0.125 – 18.0.0.194 (bez)< 13.0.0.296

  • Apple Mac Os X

    OS
    Apple
    wszystkie wersje

  • HP Insight Orchestration

    APP
    Hp
    < 7.5.0

  • HP System Management Homepage

    APP
    Hp
    < 7.5.0

  • HP Systems Insight Manager

    APP
    Hp
    < 7.5

  • HP Version Control Agent

    APP
    Hp
    < 7.5.0

  • HP Version Control Repository Manager

    APP
    Hp
    7.6< 7.5.0

  • HP Virtual Connect Enterprise Manager

    APP
    Hp
    < 7.5.0

  • Linux Kernel

    OS
    Linux
    wszystkie wersje

  • Microsoft Windows

    OS
    Microsoft
    wszystkie wersje

  • Opensuse Evergreen

    OS
    Opensuse
    11.4

  • Opensuse

    OS
    Opensuse
    13.113.2

  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    6.0

  • Red Hat Enterprise Linux Eus

    OS
    Redhat
    6.6

  • Red Hat Enterprise Linux Server

    OS
    Redhat
    6.0

  • Red Hat Enterprise Linux Workstation

    OS
    Redhat
    6.0

  • SUSE Linux Enterprise Desktop

    OS
    Suse
    12

  • SUSE Linux Enterprise Workstation Extension

    OS
    Suse
    12

CISA KEV — detailsi

Vendori
Adobe ↗
Producti
Flash Player
Added to KEVi
April 13, 2022
Remediation deadline (US Federal)i
May 4, 2022(overdue)
Required action (CISA)i

The impacted product is end-of-life and should be disconnected if still in use.

CISA descriptioni

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 4 maja 2022
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows