CVE-2015-0310

Adobe Flash Player's ASLR bypass vulnerability allowed attackers to bypass memory randomization protections, enabling remote code execution.

The vulnerability in Adobe Flash Player allowed attackers to bypass ASLR protections, leading to remote code execution. DIB organizations must ensure Flash Player is completely removed from all systems, as its end-of-life status means no patches exist for any remaining vulnerabilities. This failure highlights the critical risk of running end-of-life software, which remains a perpetual security liability.

Shame score — Adobe shipped a product with a critical ASLR bypass vulnerability that was actively exploited in the wild, and the product's end-of-life status left it perpetually vulnerable to unpatched exploits.