CVE-2015-0359: Adobe Flash Player

High severity, CVSS 10.0. EPSS: 92.1% chance of exploitation in the next 30 days.

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.

Affected products

• Adobe Flash Player: up to and including 13.0.0.264; version 14.0.0.125 only; version 14.0.0.145 only; version 14.0.0.176 only; version 14.0.0.179 only; version 15.0.0.152 only; …

Published 2015-04-14. Last modified 2026-06-17.