Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2016-1104 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR Desktop Runtime
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer32 documents7 sources
Severity
9.8CRITICALNVD
NVD7.5CNA7.5OSV7.5
EPSS
39.7%
top 2.68%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedMay 11
Latest updateMay 14
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9