ByteOS

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

>>acrobat>>9.1.2

cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*

>>acrobat>>9.3.3

cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*

>>acrobat>>9.3.4

cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*

>>acrobat>>9.3.4

cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*

>>acrobat>>9.4

cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*

>>acrobat>>9.4.1

cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*

>>acrobat>>9.4.1

cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*

>>acrobat>>9.4.2

cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*

>>acrobat>>9.4.2

cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*

>>acrobat>>9.4.3

cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*

>>acrobat>>9.4.3

cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*

>>acrobat>>9.4.4

cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*

>>acrobat>>9.4.4

cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*

>>acrobat>>9.4.5

cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*

>>acrobat>>9.4.5

cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*

>>acrobat>>9.4.6

cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*

>>acrobat>>9.4.6

cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*

>>acrobat>>9.4.7

cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*

>>acrobat>>9.5

cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*

>>acrobat>>9.5.1

cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*

>>acrobat>>9.5.2

cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

>>acrobat_reader>>9.0

cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1

cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.1

cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.2

cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.3

cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.2

cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3

cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.1

cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.2

cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.3

cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.4

cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.4

cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.4.1

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201308-03.xml	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb13-02.html	psirt@adobe.com	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201308-03.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb13-02.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-02.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1170Records found

CVE-2020-3750

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:48

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2020-3745

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:47

Updated-04 Aug, 2024 | 07:44

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2020-3749

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:45

Updated-04 Aug, 2024 | 07:44

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2020-3754

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.60% / 85.78%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:48

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0304

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.01% / 92.18%

7 Day CHG-1.90%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0316

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.43% / 93.67%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0318, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0350

Matching Score-8

Matching Score-8

Product-enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary suse_linux_workstation_extension mac_os_x windows flash_player suse_linux_enterprise_desktop enterprise_linux_server_supplementary_eus linux_kernel enterprise_linux_workstation_supplementary opensuse n/a

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0325

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.68% / 92.56%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0326

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.68% / 92.56%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0308

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.65% / 92.53%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-0310

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-10.11% / 93.18%

7 Day CHG~0.00%

Published-23 Jan, 2015 | 21:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-linux_kernel windows flash_player mac_os_x n/a Flash Player

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-0318

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-89.19% / 99.55%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0331

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.41% / 92.88%

7 Day CHG~0.00%

Published-21 Feb, 2015 | 11:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0342

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.19% / 90.01%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0341.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0339

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.33% / 92.85%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0332, CVE-2015-0333, and CVE-2015-0335.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0303

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.31% / 93.62%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CVE-2015-0341

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-5.19% / 90.01%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0322

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.84% / 91.45%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0317

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.75% / 92.59%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0319.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2020-3765

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-2.57% / 85.72%

7 Day CHG~0.00%

Published-20 Feb, 2020 | 20:35

Updated-05 May, 2025 | 17:16

Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-after_effects windows Adobe After Effects

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-0301

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.40% / 91.81%

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-0352

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0335

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.33% / 92.85%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0315

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.90% / 88.41%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0353

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0354

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0323

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.94% / 92.13%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0358

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.32% / 84.98%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0351

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.70% / 92.57%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0355

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.68% / 88.05%

7 Day CHG~0.00%

Published-14 Apr, 2015 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2015-0324

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.94% / 92.13%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0328

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.59% / 91.26%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2015-0313

Matching Score-8

Matching Score-8

Product-evergreen linux_enterprise_desktop mac_os_x windows_8.1 edge linux_kernel linux_enterprise_workstation_extension windows_server_2012 internet_explorer windows_rt windows flash_player windows_8 windows_10_1507 windows_rt_8.1 opensuse n/a Flash Player

CVSS Score-7.8||HIGH

EPSS-92.54% / 99.75%

7 Day CHG~0.00%

Published-02 Feb, 2015 | 19:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Vendor-n/a Apple Inc.openSUSE Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc SUSE

CWE ID-CWE-416

Use After Free

CVE-2015-0320

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-3.90% / 88.41%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0321

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.43% / 93.67%

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel windows flash_player mac_os_x n/a

CVE-2015-0309

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.85% / 92.08%

7 Day CHG-1.87%

Published-13 Jan, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel adobe_air_sdk_and_compiler n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0332

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.65% / 92.53%

7 Day CHG~0.00%

Published-13 Mar, 2015 | 17:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2014-9164

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-9.70% / 93.02%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-9165

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-16.98% / 95.04%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-8455.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-9163

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.19% / 87.12%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-05-04||The impacted product is end-of-life and should be disconnected if still in use.

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-flash_player windows linux_kernel mac_os_x n/a Flash Player

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2014-9158

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-14.24% / 94.47%

7 Day CHG+0.71%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-8461.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-5271

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.10% / 92.23%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player flash_player_for_android android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-3792

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-0.40% / 61.04%

7 Day CHG~0.00%

Published-21 Dec, 2009 | 16:00

Updated-23 Apr, 2026 | 00:35

Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-flash_media_server n/a

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2020-3760

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-14.83% / 94.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:55

Updated-04 Aug, 2024 | 07:44

Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-digital_editions windows Adobe Digital Editions

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2014-8456

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8439

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-34.44% / 97.05%

7 Day CHG~0.00%

Published-25 Nov, 2014 | 23:00

Updated-21 Apr, 2026 | 21:09

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

Product-linux_kernel mac_os_x windows flash_player macos air_sdk air air_sdk_\&_compiler n/a Flash Player

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-416

Use After Free

CVE-2014-8461

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.10% / 95.25%

7 Day CHG+0.85%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8443

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.92% / 93.48%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-flash_player windows linux_kernel mac_os_x n/a

CVE-2014-8440

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-87.98% / 99.49%

7 Day CHG+1.17%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0576, CVE-2014-0581, and CVE-2014-8441.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-8438

Matching Score-8

Matching Score-8