What’s Vulnerable › Vulnerabilities

CVE-2015-3084

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-05-13 · updated 2026-06-17

Description

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3077 and CVE-2015-3086.

Affected products

• Adobe Air: through 17.0.0.144
• Adobe Air Sdk: through 17.0.0.144
• Adobe Air Sdk & Compiler: through 17.0.0.144
• Adobe Flash Player 24.0.0.186 and earlier.: through 11.2.202.475; through 13.0.0.264; 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179, 15.0.0.152, 15.0.0.167 (+10)

References

• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html
• http://rhn.redhat.com/errata/RHSA-2015-1005.html
• http://www.securityfocus.com/bid/74614
• http://www.securitytracker.com/id/1032285
• https://helpx.adobe.com/security/products/flash-player/apsb15-09.html
• https://security.gentoo.org/glsa/201505-02
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html
• http://rhn.redhat.com/errata/RHSA-2015-1005.html

Get alerted when CVE-2015-3084 or the next vulnerability affects your stack