KEVIntel
Back to KEVs
8.8
CVSS
High

CVE-2016-7892

PUBLISHED

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField...

Exploited in the wild Remote Low complexity
Vendor
Adobe
Product
Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Published
Dec 15, 2016
EPSS
—

Description

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

cisa

CVSS scores

CVSS v3.1 8.8 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitation status

Exploited in the wild

Recorded 2022-03-25 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Mar 25, 2022

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel