{"schemaVersion":3,"id":"CVE-2015-8651","aliases":["UBUNTU-CVE-2015-8651"],"status":"published","duplicateOf":null,"title":"Adobe Flash Player Integer Overflow Vulnerability","description":"Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","dates":{"published":"2015-12-28T23:00:00.000Z","modified":"2025-10-21T23:55:56.425Z","reserved":null,"kevAdded":["2022-05-25T00:00:00.000Z"],"kevDue":["2022-06-15T00:00:00.000Z"]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":0.67698,"percentile":0.99313,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.67698},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.67922,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.67922,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.67922,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.67922,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.67698,"percentile":0.99313}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.67698,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.67698,"percentile":0.99313}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-25T00:00:00.000Z","dueDate":"2022-06-15T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Adobe Flash Player Integer Overflow Vulnerability","description":"Integer overflow in Adobe Flash Player allows attackers to execute code.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","label":"nvd.nist.gov/vuln/detail/CVE-2015-8651"}],"vendor":"Adobe","product":"Flash Player","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-25T00:00:00.000Z","dueDate":"2022-06-15T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Adobe Flash Player Integer Overflow Vulnerability","description":"Integer overflow in Adobe Flash Player allows attackers to execute code.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","label":"nvd.nist.gov/vuln/detail/CVE-2015-8651"}],"vendor":"Adobe","product":"Flash Player","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"adobe","product":"air","name":"air","label":"air","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 20.0.0.233","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20.0.0.233","eol":null,"hubHref":"/vendor/adobe/air"},{"vendor":"adobe","product":"air_sdk","name":"air sdk","label":"air_sdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 20.0.0.233","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20.0.0.233","eol":null,"hubHref":"/vendor/adobe/air_sdk"},{"vendor":"adobe","product":"air_sdk_\\&_compiler","name":"air sdk \\& compiler","label":"air_sdk_\\&_compiler","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 20.0.0.233","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20.0.0.233","eol":null,"hubHref":"/vendor/adobe/air_sdk__compiler"},{"vendor":"adobe","product":"flash_player","name":"Flash Player","label":"flash_player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 11.2.202.559","noFixRecorded":false,"fixedIn":null},{"text":"< 18.0.0.324","noFixRecorded":false,"fixedIn":null},{"text":"≥ 19.0.0.185, < 20.0.0.267","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.559 | < 18.0.0.324 | ≥ 19.0.0.185, < 20.0.0.267","eol":null,"hubHref":"/vendor/adobe/flash_player"},{"vendor":"ubuntu","product":"flashplugin-nonfree","name":"flashplugin-nonfree","label":"flashplugin-nonfree","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/flashplugin-nonfree","purlType":"deb","versions":[{"text":"< 11.2.202.559ubuntu0.14.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.559ubuntu0.14.04.1","eol":null,"hubHref":null},{"vendor":"hp","product":"insight_control","name":"insight control","label":"insight_control","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6","eol":null,"hubHref":"/vendor/hp/insight_control"},{"vendor":"hp","product":"insight_control_server_provisioning","name":"insight control server provisioning","label":"insight_control_server_provisioning","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6","eol":null,"hubHref":"/vendor/hp/insight_control_server_provisioning"},{"vendor":"hp","product":"matrix_operating_environment","name":"matrix operating environment","label":"matrix_operating_environment","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.6","eol":null,"hubHref":"/vendor/hp/matrix_operating_environment"},{"vendor":"hp","product":"system_management_homepage","name":"system management homepage","label":"system_management_homepage","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6","eol":null,"hubHref":"/vendor/hp/system_management_homepage"},{"vendor":"hp","product":"systems_insight_manager","name":"systems insight manager","label":"systems_insight_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6","eol":null,"hubHref":"/vendor/hp/systems_insight_manager"},{"vendor":"hp","product":"version_control_repository_manager","name":"version control repository manager","label":"version_control_repository_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 7.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6","eol":null,"hubHref":"/vendor/hp/version_control_repository_manager"},{"vendor":"opensuse","product":"evergreen","name":"evergreen","label":"evergreen","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.4","eol":null,"hubHref":"/vendor/opensuse/evergreen"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"13.1","noFixRecorded":false,"fixedIn":null},{"text":"13.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"13.1 | 13.2","eol":{"isEol":true,"eolDate":"2016-02-03T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"13.1","label":"13.1","eolFrom":"2016-02-03T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp3","noFixRecorded":false,"fixedIn":null},{"text":"11:sp4","noFixRecorded":false,"fixedIn":null},{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"12:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp3 | 11:sp4 | 12 | 12:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_workstation_extension","name":"linux enterprise workstation extension","label":"linux_enterprise_workstation_extension","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"12:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"12 | 12:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_workstation_extension"}],"affectedCount":18,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html","label":"lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034544","label":"www.securitytracker.com/id/1034544","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2697.html","label":"rhn.redhat.com/errata/RHSA-2015-2697.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb16-01.html","label":"helpx.adobe.com/security/products/flash-player/apsb16-01.html","hostname":"helpx.adobe.com","tags":["X Refsource CONFIRM","Not Applicable","Patch","Vendor Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/79705","label":"www.securityfocus.com/bid/79705","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html","label":"lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html","label":"lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html","label":"lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201601-03","label":"security.gentoo.org/glsa/201601-03","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-8651","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-8651","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://ubuntu.com/security/CVE-2015-8651","label":"ubuntu.com/security/CVE-2015-8651","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8651","label":"www.cve.org/CVERecord?id=CVE-2015-8651","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["MGASA-2015-0493","RHSA-2015:2697","SUSE-SU-2015:2401-1","SUSE-SU-2015:2402-1"],"duplicates":[],"related":["SUSE-SU-2015:2401-1","SUSE-SU-2015:2402-1"]},"timeline":[{"kind":"published","date":"2015-12-28T23:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-05-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"Adobe Flash Player Integer Overflow Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-06-15T00:00:00.000Z","label":"CISA remediation due","detail":"The impacted product is end-of-life and should be disconnected if still in use.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:56.425Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:43:04.040Z","stale":false,"partial":false}}