CVE-2015-7645: Adobe Flash Player Arbitrary Code Execution Vulnerability
Vulnerability summary
CVE-2015-7645 is a high (CVSS 9.3) vulnerability in Adobe Flash Player. It is known to be exploited: CISA lists it, first on 03-03-2022. It has been used in ransomware campaigns. EPSS estimates a 65.34% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 15-10-2015PublishedVulnerability first disclosed.
- 03-03-2022Added to CISA KEVAdobe Flash Player Arbitrary Code Execution Vulnerability
- 24-03-2022CISA remediation dueThe impacted product is end-of-life and should be disconnected if still in use.
- 21-10-2025Last modifiedVulnerability information updated.
Description
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.
CVSS metrics
4 scores · 3 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
65.34%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 65.34% on 20-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 03-03-2022
- Federal due date
- 24-03-2022
CISA required action
The impacted product is end-of-life and should be disconnected if still in use. nvd.nist.gov/vuln/detail/CVE-2015-7645
Public exploits
1 foundAdobe Flash - 'IExternalizable.writeExternal' Type Confusion
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- flash-player&distro=SUSE Linux Enterprise Desktop 11 SP3< 11.2.202.540-0.23.1
- flash-player&distro=SUSE Linux Enterprise Desktop 11 SP4< 11.2.202.540-0.23.1
- flash-player&distro=SUSE Linux Enterprise Desktop 12< 11.2.202.540-108.1
- flash-player&distro=SUSE Linux Enterprise Workstation Extension 12< 11.2.202.540-108.1
- linux_enterprise_desktop11:sp3 | 11:sp4 | 12
Redhat5 products
- enterprise_linux_desktop5.0 | 6.0
- enterprise_linux_eus6.7
- enterprise_linux_server5.0 | 6.0
- enterprise_linux_server_from_rhui5.0 | 6.0
- enterprise_linux_workstation5.0 | 6.0
Adobe1 product
- flash_player≥ 18.0.0.160, ≤ 18.0.0.252 | 19.0.0.185 | 19.0.0.207 | ≤ 11.2.202.535
Ubuntu1 product
- flashplugin-nonfree< 11.2.202.535ubuntu0.14.04.1
5 vendors · 15 products
References
22 links- helpx.adobe.com/security/products/flash-player/apsa15-05.htmlX Refsource CONFIRMBroken LinkPatchVendor AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00017.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 22 references
- packetstormsecurity.com/files/134009/Adobe-Flash-IExternalizable.writeExternal-Type-Confusion.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7645Government ResourceUS Government Resource
- bugzilla.suse.com/950474REPORT