VULNERABILITY INTELLIGENCE

CVE-2016-4171

CVSS score9.8 CRITICAL

EPSS probability20.05%

CISA KEVKnown exploited vulnerability

Published2016-06-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe Flash Player Remote Code Execution Vulnerability

Vendor / product: Adobe / Flash Player

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Primary references

psirt@adobe.com — Mailing List, Third Party Advisory
psirt@adobe.com — Mailing List, Third Party Advisory
psirt@adobe.com — Mailing List, Third Party Advisory
psirt@adobe.com — Third Party Advisory, VDB Entry
psirt@adobe.com — Third Party Advisory, VDB Entry
psirt@adobe.com — Third Party Advisory
psirt@adobe.com — Vendor Advisory
psirt@adobe.com — Vendor Advisory
psirt@adobe.com — Third Party Advisory
psirt@adobe.com — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory