CVE-2016-4138

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

25.42% chance of exploitation in the next 30 days, 98th percentile

Published

2016-06-16

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40090

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
• http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
• http://www.securitytracker.com/id/1036117
• https://access.redhat.com/errata/RHSA-2016:1238
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083

References

• CVE Record
• NVD entry