CVE-2015-0318: Adobe Flash Player memory corruption allows arbitrary code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

high priorityCVSS 10.0 with no authentication and full confidentiality, integrity and availability impact, plus a very high EPSS score, though the product is legacy and no KEV listing or confirmed in-the-wild exploitation is recorded.

What it is

Adobe Flash Player contains a memory corruption flaw reachable through unspecified vectors, affecting Windows, OS X and Linux builds before the fixed versions listed in APSB15-04. Successful exploitation allows arbitrary code execution or denial of service. The record gives no root-cause detail beyond memory corruption, so the exact trigger is unknown.

Impact

An attacker can execute arbitrary code in the context of the Flash Player process, or crash it to cause a denial of service. Given Flash's historical desktop ubiquity, code execution typically means full compromise of the user's session.

Attack surface

The CVSS 2.0 vector AV:N/AC:L/Au:N/C:C/I:C/A:C indicates a network-reachable, low-complexity attack requiring no authentication. Flash content is normally delivered via a browser or document, so user interaction (loading the malicious content) is the practical precondition, though the record does not state this explicitly.

Exploitation

Not listed in CISA KEV, but EPSS is 0.75781 (99.5th percentile), indicating a high modeled probability of exploitation activity. Reference tags show only Patch and Vendor Advisory, with no public exploit or in-the-wild tag supplied.

What to do

• Update Flash Player to 13.0.0.269 or later, 16.0.0.305 or later on Windows/OS X, or 11.2.202.442 or later on Linux per APSB15-04.
• Apply the corresponding Microsoft, Red Hat, SUSE, and Gentoo updates where Flash is bundled or distributed.
• Remove or disable Flash Player where it is no longer required; treat it as end-of-life software.
• Restrict browser plugin execution and block untrusted Flash content at the gateway or via allow-listing.

Detection

• Monitor for Flash Player process crashes or abnormal terminations that could indicate memory corruption attempts.
• Alert on Flash Player versions below the fixed builds listed in APSB15-04 across endpoints.
• Hunt for browser or plugin processes spawning unexpected child processes, a common post-exploitation pattern for Flash exploits.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.