CVE-2015-0337: Adobe Flash Player

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected products

• Adobe Flash Player: up to and including 11.2.202.442; up to and including 13.0.0.264; version 14.0.0.125 only; version 14.0.0.145 only; version 14.0.0.176 only; version 14.0.0.179 only; …

Published 2015-03-13. Last modified 2026-06-17.