High severity · published Jun 16, 2016
CVE-2016-4126
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has…
8.8
CVSS
4.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Air Desktop Runtime · Adobe
through 21.0.0.215 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4126
Patch
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083
Patch
https://helpx.adobe.com/security/products/air/apsb16-23.html
More from Air Desktop Runtime
9.8
CVE-2016-1019
Adobe Flash Player Arbitrary Code Execution Vulnerability
8.8
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
8.8
CVE-2016-0984
Adobe Flash Player and AIR Use-After-Free Vulnerability
9.8
CVE-2016-4163
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…
9.8
CVE-2016-4162
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or…