Adobe Flash Player ASLR Bypass Vulnerability

Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.

cat cve-2015-0310.json

Vendor: Adobe
Product: Flash Player
CVSS: 7.8
EPSS (exploit probability): 15.2%
Status: kev
CISA patch-by (BOD 22-01): June 15, 2022
Published: May 25, 2022
Source: https://nvd.nist.gov/vuln/detail/CVE-2015-0310

Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-05-25. Required action per CISA: The impacted product is end-of-life and should be disconnected if still in use. Due date: 2022-06-15.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.