CVE-2015-7645
Adobe Flash Player 18.0.0.160 – 18.0.0.252
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSummary
CVE-2015-7645 is a high-severity an unspecified weakness vulnerability in Adobe Flash Player. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 0.7% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Adobe Flash Player versions 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X, as well as 11.x through 11.2.202.535 on Linux, contain an unspecified flaw that allows remote attackers to execute arbitrary code by means of a crafted SWF file. The issue carries a CVSS 3.1 base score of 7.8 and is tracked without an associated CWE.
Remote attackers can exploit the vulnerability by serving malicious SWF content that a user is tricked into opening, resulting in arbitrary code execution with full impacts on confidentiality, integrity, and availability under the conditions AV:L/AC:L/PR:N/UI:R/S:U.
Security advisories published by openSUSE in October 2015 address the flaw through updated Flash Player packages, while public reporting confirms the vulnerability was exploited in the wild that same month as part of the Pawn Storm campaign.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2015-7548
Vulnerability Data
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October…
more
2015.
- CWE(s)
- KEV Date Added
- 03 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.