Vulnerability detail
Enriched intelligence for a single CVE
High
CVE-2016-7855
PUBLISHEDUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers...
- Vendor
- Adobe
- Product
- Flash Player
- Published
- Nov 01, 2016
- EPSS
- —
Description
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.
CVSS scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitation status
Exploited in the wild
Recorded 2022-03-03 00:00:00 UTC · Source
SSVC decision points
- Exploitation
- active
- Automatable
- No
- Technical impact
- total
References
- https://security.gentoo.org/glsa/201610-10
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-128
- http://www.securitytracker.com/id/1037111
- https://helpx.adobe.com/security/products/flash-player/apsb16-36.html
- http://rhn.redhat.com/errata/RHSA-2016-2119.html
- https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html
- http://www.securityfocus.com/bid/93861
Known exploited vulnerability sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CISA | Mar 03, 2022 |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel