{"id":"CVE-2015-0310","published":"2015-01-23T21:59:00Z","modified":"2026-06-17T00:19:57Z","title":"Adobe Flash Player ASLR Bypass Vulnerability","vendor":"Adobe","product":"Flash Player","tier":"core","eol":{"product":"Adobe Flash Player","since":"2020-12-31","note":"No security updates; remove it."},"description":{"text":"Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.","provenance":"source","from":"NVD"},"summary":{"text":"Adobe Flash Player (versions before 13.0.0.262, 14.x through 16.x before 16.0.0.287 on Windows and OS X, and before 11.2.202.438 on Linux) fails to properly restrict discovery of memory addresses, which weakens address space layout randomization. An attacker with local access and no privileges, who needs a user to take an action such as opening crafted content, can exploit this to bypass ASLR on Windows, with unspecified effects on other platforms.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:10:39Z"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.15097,"percentile":0.96722,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","ransomware":false,"requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","provenance":"source"},"vulncheckKev":{"dateAdded":"2015-01-16","exploitedFirstSeen":"2015-01-16","ransomware":true,"evidence":[{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","date":"2015-01-16"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0310","date":"2015-01-23"},{"url":"https://www.fireeye.com/blog/threat-research/2015/01/a_different_exploit.html","date":"2015-01-27"},{"url":"https://securelist.com/kaspersky-security-bulletin-2015-overall-statistics-for-2015/73038/","date":"2015-12-15"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-05-25"}],"evidenceTotal":6,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"},{"id":"CWE-264","name":null}],"references":[{"url":"http://helpx.adobe.com/security/products/flash-player/apsb15-02.html","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/62452","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62601","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62660","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62740","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201502-02.xml","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72261","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031609","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb15-02.html","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/62452","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62601","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62660","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/62740","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201502-02.xml","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72261","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031609","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/cisagov/vulnrichment/issues/196","tags":["Issue Tracking"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0310","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"source","basis":"ctid-kev","bases":["ctid-kev"],"basisDetail":"CTID Mappings Explorer KEV 07/28/2025 (ATT&CK 16.1); capability: Security Feature Bypass","mappingType":"exploitation_technique","evidence":[],"comment":"This vulnerability is exploited with maliciously-crafted code hosted on a website via drive-by compromise. It has been seen used in the wild by exploit kits.","confidence":"high"}],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"(CVE-2013-2551), Adobe Flash Player (CVE-2015-0310, CVE-2015-0311, and","start":99150,"end":99220},{"quote":"60\r\nCVE-2012-0158, 62\r\nCVE-2012-0507, 57\r\nCVE-2012-1723, 56, 57, 58, 59\r\nCVE-2012-1889, 64\r\nCVE-2013-0074, 56\r\nCVE-2013-0422, 57, 59\r\nCVE-2013-1493, 56\r\nCVE-2013-2423, 56\r\nCVE-2013-2460, 56\r\nCVE-2013-2551, 56\r\nCVE-2013-3896, 56\r\nCVE-2014-1761, 62\r\nCVE-2014-6332, 61\r\nCVE-2015-0072, 64\r\nCVE-2015-0310,","start":261311,"end":261611}]},{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"CVE-2015-0310 Adobe Flash Player APSB15-02 Angler (JS/Axpergle)","start":81651,"end":81714},{"quote":"52\r\nCVE-2012-0507, 47, 49\r\nCVE-2012-1723, 47, 48, 49\r\nCVE-2012-1889, 54\r\nCVE-2013-0074, 46\r\nCVE-2013-0422, 47, 49\r\nCVE-2013-2460, 46\r\nCVE-2013-2551, 46, 54\r\nCVE-2013-7331, 54\r\nCVE-2014-0322, 54\r\nCVE-2014-0497, 53\r\nCVE-2014-0515, 53\r\nCVE-2014-6332, 43, 44, 50\r\nCVE-2014-8439, 46, 53\r\nCVE-2015-0097, 57\r\nCVE-2015-0310,","start":238095,"end":238411}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-0323","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0323","exploited":true,"exploitedSince":"2022-05-25","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"source"}],"timeline":[{"date":"2015-01-16","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","provenance":"source"},{"date":"2015-01-23","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","provenance":"source"},{"date":"2022-05-25","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-05-25","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0323","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":2679},"priority":{"score":63.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4304 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.34,"detail":"percentile 0.9672"},{"name":"Named in threat reports","points":6.13,"detail":"2 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.46,"detail":"base score 7.8"},{"name":"End-of-life product","points":-15.0,"detail":"No patches exist; remove or isolate it"}]}}