CVE-2016-7855
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- September 09, 2016
- Published Date
- November 01, 2016
- Last Updated
- February 04, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.
CVSS Scores
CVSS v3.1
8.8 - HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC Information
- Exploitation
- active
- Technical Impact
- total
Exploit Status
- Exploited in the Wild
- Yes (added 2022-03-03 00:00:00 UTC) Source
References
https://security.gentoo.org/glsa/201610-10
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-128
http://www.securitytracker.com/id/1037111
https://helpx.adobe.com/security/products/flash-player/apsb16-36.html
http://rhn.redhat.com/errata/RHSA-2016-2119.html
https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html
http://www.securityfocus.com/bid/93861
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2022-03-03 00:00:00 UTC |