CVE-2015-6682

CRITICAL 10.0CVE-2015-6682 · Published 22/09/2015 · updated 17/06/2026

In short

CVE-2015-6682 is a CRITICAL (CVSS 10.0) vulnerability affecting air (adobe), air sdk (adobe), air sdk & compiler (adobe).
Chance of exploitation in the next 30 days (EPSS): 4.8%, higher than 92.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
air adobe	`≤ 18.0.0.143≤ 18.0.0.199`	No fix yet
air sdk adobe	`≤ 18.0.0.199`	No fix yet
air sdk & compiler adobe	`≤ 18.0.0.180`	No fix yet
flash player adobe	`= 14.0.0.125= 14.0.0.145= 14.0.0.176= 14.0.0.179= 15.0.0.152= 15.0.0.167= 15.0.0.189= 15.0.0.223= 15.0.0.239= 15.0.0.246= 16.0.0.235= 16.0.0.257= 16.0.0.287= 16.0.0.296= 17.0.0.134= 17.0.0.169= 17.0.0.188= 17.0.0.190= 17.0.0.191= 18.0.0.160= 18.0.0.194= 18.0.0.203= 18.0.0.209= 18.0.0.232≤ 11.2.202.508≤ 13.0.0.289`	No fix yet

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, and CVE-2015-5584.

References

More vulnerabilities in air

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free