CVE-2015-8640: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8640?
CVE-2015-8640 is classified as a critical vulnerability that can lead to arbitrary code execution.
How do I fix CVE-2015-8640?
The fix for CVE-2015-8640 involves updating Adobe Flash Player to versions 18.0.0.324 or later, or to versions 19.x and 20.x at or above 20.0.0.267.
Which versions of Adobe Flash Player are affected by CVE-2015-8640?
CVE-2015-8640 affects Adobe Flash Player versions before 18.0.0.324, all 19.x versions before 20.0.0.267, and 20.x versions before 20.0.0.267.
Is Adobe AIR affected by CVE-2015-8640?
Yes, Adobe AIR versions prior to 20.0.0.233 are affected by CVE-2015-8640.
Can CVE-2015-8640 be exploited on Linux systems?
Yes, CVE-2015-8640 can be exploited on Linux systems running vulnerable versions of Adobe Flash Player.