CVE-2016-4141

published 2016-06-16

CVE-2016-4141: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…

Priority P3 44 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 21.0.0.242	—
adobe	flash_player	<= 11.2.202.621	—
adobe	flash_player	<= 18.0.0.352	—
adobe	flash_player_desktop_runtime	<= 21.0.0.242	—
opensuse	opensuse	—	—
opensuse	opensuse	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_workstation	—	—
redhat	enterprise_linux_workstation	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_workstation_extension	—	—

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

vendor_redhat 8.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.