CVE Watch10 sept 2026

CVE-2016-4117

Adobe Flash Player Arbitrary Code Execution Vulnerability

CVSS

9.8

Crítico

EPSS

94.4%

p100

KEV

SÍ

3 mar 2022

Exploit Today

0-100

Publicado: 11 may 2016 · Última mod.: 10 sept 2026

EPSS · 30d

94.4%EPSS · 30 días94.4%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Adobe / Flash Player

Vulnerabilidad

Adobe Flash Player Arbitrary Code Execution Vulnerability

Añadido a KEV

3 mar 2022

Remediar antes de

24 mar 2022

Uso conocido en ransomware

Sí

Descripción resumida

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Acción requerida

The impacted product is end-of-life and should be disconnected if still in use.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2016-4117

Descripción técnica

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2018-159827.8 ALT

99.8%

KEV—80Adobe Flash Player Use-After-Free Vulnerability14d CVE-2016-10199.8 CRÍ

97.7%

KEV—79Adobe Flash Player Arbitrary Code Execution Vulnerability14d CVE-2014-0497—

100.0%

KEV—80Adobe Flash Player Integer Underflow Vulnerablity—CVE-2015-3113—

100.0%

KEV—80Adobe Flash Player Heap-Based Buffer Overflow Vulnerability—CVE-2011-0611—

99.9%

KEV—80Adobe Flash Player Remote Code Execution Vulnerability—CVE-2015-5119—

99.9%

KEV—80Adobe Flash Player Use-After-Free Vulnerability—