Vulnerabilitymedium

The Latest Flash UAF Vulnerabilities in Exploit Kits

Palo Alto Unit 42by Tao YanJan 28, 2022 · 21:24 UTC (Jan 28, 2022)15 min read2

Read at unit42.paloaltonetworks.com

Analyze CVE-2015-0311 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2015-0311 CVE-2015-0313 CVE-2015-0359

Tags: cve-2015-0311 cve-2015-0313 cve-2015-0359 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-0311	Use-After-Free Remote Code Execution in Adobe Flash Player	—	86%	KEV	— KEV Apr 13, 2022
CVE-2015-0313	Use-After-Free Remote Code Execution in Adobe Flash Player	—	95%	KEV	— KEV Apr 13, 2022

From the original article

15 min read at unit42.paloaltonetworks.com

Recently, several popular exploit kits, including Angler, Flash EK, SweetOrange, Fiesta andNeutrino[1], have included several use-after-free (UAF) vulnerabilities in Adobe Flash to exploit victims’ browsers.

Palo Alto Unit 42

By Tao Yan · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.