CVE-2015-3113

Vendorsuse, adobe, redhat, hp, opensuseProductlinux enterprise desktop, flash player, enterprise linux eus, enterprise linux server, enterprise linux desktop, linux enterprise workstation extension, enterprise linux workstation, version control repository manager, systems insight manager, system management homepage, opensuse, evergreen, insight orchestration, version control agent, virtual connect enterprise managerDiscoveredJun 23, 2015UpdatedApr 21, 2026

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

View graph Watch Export

CVSS v3.1

9.8 CRITICAL

EPSS

99.8%

probability of exploitation in 30 days

CISA KEV

Listed

confirmed active exploitation

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 5, 2026

▼ 0.13pp

99.9% → 99.8% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Connections

16 relationships