9.3

CVE-2015-8644

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version <= 18.0.0.268
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version19.0.0.185
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version19.0.0.207
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version19.0.0.226
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version19.0.0.245
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version20.0.0.228
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version20.0.0.235
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 11.2.202.554
   Linux ≫ Linux Kernel
Adobe ≫ Air Sdk Version <= 20.0.0.204
   Apple ≫ iPhone OS
   Apple ≫ macOS X
   Google ≫ Android
   Microsoft ≫ Windows
Adobe ≫ Air Version <= 20.0.0.204
   Apple ≫ macOS X
   Google ≫ Android
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 49.46% 0.977
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C