Is CVE-2015-8451 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 6%.

What products does CVE-2015-8451 affect?

Tracked products affected include Apple iOS. Check the version you run to see whether it is affected.

How do I fix CVE-2015-8451?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2015-8451

Q: What is CVE-2015-8451?

CVE-2015-8451 is a high-severity software vulnerability (Memory corruption) with a CVSS score of 10. Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allo

HIGH severity · CVSS 10 · Memory corruption

10CVSS HIGH

Summary

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8455.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)6%

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Apple iOS

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

CVE-2015-8451

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information