# CVE-2015-0311

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

- Page: https://www.vulneraibility.com/cve/CVE-2015-0311
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2022-04-13; CISA due date 2022-05-04
- EPSS: 85.59% (percentile 99.7)
- Public exploit code: 1 on Exploit-DB · 1 Metasploit module · 1 GitHub proof of concept (first 2015-03-12)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-11-17)
- Published: 2015-01-23

## Affected

- adobe:flash_player
- suse:linux_enterprise_desktop
- suse:linux_enterprise_workstation_extension
- microsoft:internet_explorer
- microsoft:edge

## References

- [advisory] http://security.gentoo.org/glsa/glsa-201502-02.xml
- [advisory] http://secunia.com/advisories/62660
- [advisory] http://secunia.com/advisories/62740
- [advisory] http://secunia.com/advisories/62432
- [advisory] http://secunia.com/advisories/62650
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
- [other] http://www.securityfocus.com/bid/72283
- [advisory] http://secunia.com/advisories/62543
- [other] https://technet.microsoft.com/library/security/2755801
- [other] http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
- [other] http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
- [other] http://www.securitytracker.com/id/1031597
- [other] http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0311
- [other] https://github.com/cisagov/vulnrichment/issues/196

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.