CVE-2015-8651
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
The impacted product is end-of-life and should be disconnected if still in use.
Adobe Flash Player and AIR have a flaw where numbers can overflow, allowing attackers to run malicious code on your computer. This is dangerous because attackers can take complete control of your system.
Integer overflow vulnerability in Adobe Flash Player (versions before 18.0.0.324, 20.0.0.267, and 11.2.202.559), Adobe AIR, and related SDKs allows remote code execution through unspecified attack vectors. The vulnerability stems from improper integer validation, enabling attackers to bypass memory protections and execute arbitrary code with user privileges.
The full analysis of this CVE is available in Portuguese →