# CVEs published 2015-12-28 30 CVEs were published on December 28, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-8459](https://cve.now/CVE-2015-8459.md): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef (no CVSS) - [CVE-2015-8460](https://cve.now/CVE-2015-8460.md): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef (no CVSS) - [CVE-2015-8634](https://cve.now/CVE-2015-8634.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8635](https://cve.now/CVE-2015-8635.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8636](https://cve.now/CVE-2015-8636.md): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef (no CVSS) - [CVE-2015-8638](https://cve.now/CVE-2015-8638.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8639](https://cve.now/CVE-2015-8639.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8640](https://cve.now/CVE-2015-8640.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8641](https://cve.now/CVE-2015-8641.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8642](https://cve.now/CVE-2015-8642.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8643](https://cve.now/CVE-2015-8643.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8644](https://cve.now/CVE-2015-8644.md): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef (no CVSS) - [CVE-2015-8645](https://cve.now/CVE-2015-8645.md): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef (no CVSS) - [CVE-2015-8646](https://cve.now/CVE-2015-8646.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8647](https://cve.now/CVE-2015-8647.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8648](https://cve.now/CVE-2015-8648.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8649](https://cve.now/CVE-2015-8649.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8650](https://cve.now/CVE-2015-8650.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2 (no CVSS) - [CVE-2015-8651](https://cve.now/CVE-2015-8651.md): Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on (CVSS 8.8, KEV) - [CVE-2015-6850](https://cve.now/CVE-2015-6850.md): EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gai (no CVSS) - [CVE-2015-6852](https://cve.now/CVE-2015-6852.md): Directory traversal vulnerability in the API in EMC Secure Remote Services Virtual Edition 3.x before 3.10 allows remote authenticated users (no CVSS) - [CVE-2013-7446](https://cve.now/CVE-2013-7446.md): Use-after-free vulnerability in net/unix/af\_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF\_UNIX socket per (no CVSS) - [CVE-2015-7509](https://cve.now/CVE-2015-7509.md): fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a craft (no CVSS) - [CVE-2015-7884](https://cve.now/CVE-2015-7884.md): The vivid\_fb\_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain stru (no CVSS) - [CVE-2015-7885](https://cve.now/CVE-2015-7885.md): The dgnc\_mgmt\_ioctl function in drivers/staging/dgnc/dgnc\_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure m (no CVSS) - [CVE-2015-7990](https://cve.now/CVE-2015-7990.md): Race condition in the rds\_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of ser (no CVSS) - [CVE-2015-8374](https://cve.now/CVE-2015-8374.md): fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-tru (no CVSS) - [CVE-2015-8543](https://cve.now/CVE-2015-8543.md): The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifie (no CVSS) - [CVE-2015-8569](https://cve.now/CVE-2015-8569.md): The (1) pptp\_bind and (2) pptp\_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length (no CVSS) - [CVE-2015-8660](https://cve.now/CVE-2015-8660.md): The ovl\_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-12-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.