CVE-2015-8651

CWE-190

Critical

97.5

RPS

Description

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

Source: NVD

CVSS: 8.8; High · v3.1
EPSS: 67.69%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since May 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-190
Published: 28 Dec 2015; Last modified 22 Apr 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2015-8651

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time

CVE-2015-8651

Description

Signals

Get this score from the API