Search/CVE-2015-3043
● CVE — Critical

CVE-2015-3043

Vendoradobe, redhat, opensuse, novellProductflash player, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux desktop, enterprise linux workstation, opensuse, suse linux enterprise desktop, evergreen, suse linux enterprise workstation extension, enterprise linux server from rhuiDiscoveredApr 14, 2015UpdatedApr 21, 2026

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
73.9%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 2, 2026
▼ 0.59pp
74.4% → 73.9% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Apr 14, 2015
Disclosure — published as a CVE record. · last revised by NVD Apr 21, 2026
Public PoC (1)
github.com/whitehairman/Exploit
Unverified third-party code — review before executing.