CVE-2015-5122

Adobe Flash Player's use-after-free vulnerability allowed remote attackers to execute arbitrary code, and the product's end-of-life status meant it remained perpetually unpatched and exploitable.

Adobe Flash Player suffered a use-after-free vulnerability enabling remote code execution, but its December 2020 end-of-life meant no patches were issued, leaving installations perpetually vulnerable. DIB organizations must ensure discontinued software is fully removed to avoid exposure to unpatched exploits that can lead to system compromise and compliance failures.

Shame score — The product was end-of-life with no patches, making the vulnerability perpetually exploitable and representing negligent software maintenance.