CVE Watch—

CVE-2015-0310

Adobe Flash Player ASLR Bypass Vulnerability

CVSS

—

No CVSS

EPSS

15.1%

p97

KEV

YES

May 25, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

15.1%EPSS · 30 days15.2%

2026-09-172026-10-15

KEV catalog record

Product

Adobe / Flash Player

Vulnerability

Adobe Flash Player ASLR Bypass Vulnerability

Added to KEV

May 25, 2022

Remediate by

Jun 15, 2022

Known ransomware use

Summary description

Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-0310

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-159827.8 HIG

99.8%

KEV—80Adobe Flash Player Use-After-Free Vulnerability15d CVE-2016-41179.8 CRI

99.9%

KEV—80Adobe Flash Player Arbitrary Code Execution Vulnerability36d CVE-2016-10199.8 CRI

97.7%

KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability15d CVE-2014-0497—

100.0%

KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-3113—

100.0%

KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—

99.9%

KEV—80Adobe Flash Player Remote Code Execution Vulnerability—