vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2015-3120

N/A
Published: July 9, 2015 at 04:00 PM UTC
Updated: June 17, 2026 at 12:25 AM UTC
4 products affected across 1 vendorFlash PlayerAirAir SDK· also runs on 3 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 7%

Description

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Air· Adobe
95%
v ≤ 18.0.0.144
Air SDK· Adobe
95%
v ≤ 18.0.0.144
Air SDK & Compiler· Adobe
95%
v ≤ 18.0.0.144
Flash Player· Adobe
95%
v ≤ 11.2.202.468v ≤ 13.0.0.28914.0.0.12514.0.0.14514.0.0.17614.0.0.17915.0.0.15215.0.0.16715.0.0.18915.0.0.22315.0.0.23915.0.0.24616.0.0.23516.0.0.25716.0.0.28716.0.0.29617.0.0.13417.0.0.16917.0.0.18817.0.0.19018.0.0.16018.0.0.194
apple-macos (environment) · linux-linux-kernel (environment) · microsoft-windows (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (7)

Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html
Vendor Advisoryx_refsource_REDHATThird Party Advisory
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2015-1214.html
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/75595
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://www.securitytracker.com/id/1032810
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
Vendor Advisoryx_refsource_GENTOOThird Party Advisory
Source: [email protected]
https://security.gentoo.org/glsa/201507-13

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-704

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card